Description
Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the usernamed cookie parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Evil-Cod3r · textwebappsphp
https://www.exploit-db.com/exploits/8766
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50685
Exploit vdb-entry
x_refsource_osvdb
http://osvdb.org/54704
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/35075
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/35207
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/8766
Scores
EPSS
0.0199
EPSS Percentile
83.7%
Details
CWE
CWE-264
Status
published
Products (3)
tutorial-share/tutorial_share
3.0.0
tutorial-share/tutorial_share
3.0.1
tutorial-share/tutorial_share
< 3.5.0
Published
Jul 01, 2009
Tracked Since
Feb 18, 2026