MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=109416709710447&w=2 | |
| http://secunia.com/advisories/12458 | Vendor Advisory |
| http://www.securityfocus.com/bid/11095 | Exploit Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/17217 | |
| http://marc.info/?l=bugtraq&m=109416709710447&w=2 | |
| http://secunia.com/advisories/12458 | Vendor Advisory |
| http://www.securityfocus.com/bid/11095 | Exploit Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/17217 |
Configurations
History
No history.
Information
Published : 2004-09-02 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2004-1661
Mitre link : CVE-2004-1661
CVE.ORG link : CVE-2004-1661
JSON object : View
Products Affected
sitecubed
- mailworks_professional
CWE
