Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-2003. PoCs published by G4N0K, Mr.tro0oqy.
AI-analyzed exploit summary This exploit demonstrates insecure cookie handling in multiple Ascad Networks products, allowing an attacker to bypass authentication by setting specific cookie values via JavaScript. The PoC provides direct cookie manipulation steps for each vulnerable product.
Description
Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to "admin."
Exploits (2)
This exploit demonstrates insecure cookie handling in multiple Ascad Networks products, allowing an attacker to bypass authentication by setting specific cookie values via JavaScript. The PoC provides direct cookie manipulation steps for each vulnerable product.
This exploit demonstrates an insecure cookie handling vulnerability in Password Protector SD v1.3.1, allowing an attacker to bypass authentication by setting specific cookie values via JavaScript.