CVE-2009-1489
Fungamez RC1 - Unauthenticated Authentication Bypass via User Cookie Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-1489. PoCs published by YEnH4ckEr.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass via SQL injection in the login form and insecure cookie handling, as well as a local file inclusion (LFI) vulnerability in the admin module. The PoC provides clear steps to exploit these vulnerabilities in FunGamez RC-1.
Description
includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter.
Exploits (1)
This exploit demonstrates an authentication bypass via SQL injection in the login form and insecure cookie handling, as well as a local file inclusion (LFI) vulnerability in the admin module. The PoC provides clear steps to exploit these vulnerabilities in FunGamez RC-1.