Techno Dreams Job Career Package Cookie Authentication Bypass Vulnerability

Bugtraq ID:	34865
Class:	Access Validation Error
CVE:	CVE-2009-1638
Remote:	Yes
Local:	No
Published:	May 07 2009 12:00AM
Updated:	Apr 13 2015 09:10PM
Credit:	TiGeR-Dz
Vulnerable:	Techno Dreams Job Career Package 3.0
Not Vulnerable:

Techno Dreams Job Career Package Cookie Authentication Bypass Vulnerability

Techno Dreams Job Career Package is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain unauthorized access to the affected application, which may aid in further attacks.

Job Career Package 3.0 is vulnerable; other versions may also be affected.

Techno Dreams Job Career Package Cookie Authentication Bypass Vulnerability

Attackers can exploit this issue via a browser.

The following example data is available:

javascript:document.cookie="JobCareerAdmin=Login;path=/";

Techno Dreams Job Career Package Cookie Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Techno Dreams Job Career Package Cookie Authentication Bypass Vulnerability

References:

• Job Career Package Homepage (Techno Dreams)