vendor:
PHPAuctionSystem
by:
ZoRLu
7.5
CVSS
HIGH
Insecure Cookie Handling
384
CWE
Product Name: PHPAuctionSystem
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
PHPAuctionSystem Insecure Cookie Handling Vuln.
PHPAuctionSystem is vulnerable to insecure cookie handling. An attacker can inject malicious code into the cookie and gain access to the system. The exploit code is given in the text, which sets the cookie values to the given ID, real name, username and email.
Mitigation:
Ensure that the cookie values are properly sanitized and validated before being used.
