CVE-2009-4808

This exploit demonstrates insecure cookie handling in Article Publisher PRO 1.5, allowing an attacker to bypass authentication by setting arbitrary cookie values for admin or user sessions.

The exploit demonstrates SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 via the 'c' and 'id' parameters, as well as insecure cookie handling for authentication bypass. The PoC includes URLs to extract sensitive data from the database and a JavaScript snippet to set an admin cookie.