Pointter PHP Content Management System Multiple Cookie Authentication Bypass Vulnerabilities

Bugtraq ID:	45415
Class:	Access Validation Error
CVE:	CVE-2010-4332
Remote:	Yes
Local:	No
Published:	Dec 15 2010 12:00AM
Updated:	Dec 15 2010 12:00AM
Credit:	Mark Stanislav
Vulnerable:	Pointter Pointter PHP Content Management System 1.0
Not Vulnerable:

Pointter PHP Content Management System Multiple Cookie Authentication Bypass Vulnerabilities

Pointter PHP Content Management System is prone to multiple authentication-bypass vulnerabilities.

Attackers can exploit this issue to gain administrative control of the affected application.

Pointter PHP Content Management System 1.0 is vulnerable; other versions may also be affected.

Pointter PHP Content Management System Multiple Cookie Authentication Bypass Vulnerabilities

Attackers may exploit this issue through a browser.

The following example inputs are available:

Cookie: auser=anyvalue
Cookie: apass=anyvalue

Pointter PHP Content Management System Multiple Cookie Authentication Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Pointter PHP Content Management System Multiple Cookie Authentication Bypass Vulnerabilities

References:

• 'Pointter PHP Content Management System' Unauthorized Privilege Escalation (CVE- (Mark Stanislav)
  
• Pointter PHP Content Management System Homepage (Pointter)