Pointter PHP Micro-Blogging Social Network Multiple Cookie Authentication Bypass Vulnerabilities

Bugtraq ID:	45417
Class:	Access Validation Error
CVE:	CVE-2010-4333
Remote:	Yes
Local:	No
Published:	Dec 15 2010 12:00AM
Updated:	Dec 15 2010 12:00AM
Credit:	Mark Stanislav
Vulnerable:	Pointter Pointter PHP Micro-Blogging Social Network 1.8
Not Vulnerable:

Pointter PHP Micro-Blogging Social Network Multiple Cookie Authentication Bypass Vulnerabilities

Pointter PHP Micro-Blogging Social Network is prone to multiple authentication-bypass vulnerabilities.

Attackers can exploit this issue to gain administrative control of the affected application.

Pointter PHP Micro-Blogging Social Network 1.8 is vulnerable; other versions may also be affected.

Pointter PHP Micro-Blogging Social Network Multiple Cookie Authentication Bypass Vulnerabilities

Attackers may exploit this issue through a browser.

The following example inputs are available:

Cookie: auser=anyvalue
Cookie: apass=anyvalue

Pointter PHP Micro-Blogging Social Network Multiple Cookie Authentication Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].