CVE-2009-1617

Teraway Linktracker - Authentication Bypass

Title source: rule

Description

Teraway LinkTracker 1.0 allows remote attackers to bypass authentication and gain administrative access via a userid=1&lvl=1 value for the twLTadmin cookie.

Exploits (1)

exploitdb WORKING POC VERIFIED
by ThE g0bL!N · textwebappsphp
https://www.exploit-db.com/exploits/8550

Scores

EPSS 0.0166
EPSS Percentile 81.9%

Classification

CWE
CWE-287
Status draft

Affected Products (1)

teraway/linktracker

Timeline

Published May 12, 2009
Tracked Since Feb 18, 2026