Rapidsendit Clone Script 'admin.php' Insecure Cookie Authentication Bypass Vulnerability

Bugtraq ID:	43702
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 08 2009 12:00AM
Updated:	Jul 08 2009 12:00AM
Credit:	NoGe
Vulnerable:
Not Vulnerable:

Rapidsendit Clone Script 'admin.php' Insecure Cookie Authentication Bypass Vulnerability

Rapidsendit Clone Script is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain administrative access to the affected application; this may aid in further attacks.

Rapidsendit Clone Script 2.1 and prior are vulnerable.

Rapidsendit Clone Script 'admin.php' Insecure Cookie Authentication Bypass Vulnerability

Attackers can exploit this issue via a browser.

The following example cookie data is available:

• /data/vulnerabilities/exploits/43702.txt

Rapidsendit Clone Script 'admin.php' Insecure Cookie Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Rapidsendit Clone Script 'admin.php' Insecure Cookie Authentication Bypass Vulnerability

References:

• Rapidsendit Clone Product Page (Rapidsendit)