CVE-2005-1482 ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie.
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| interspire articlelive | = 2005 | No fix listed |
References
- 20050503 Authentication bypass, sql injections and xss in ArticleLive 2005 mailing-list
- 15250 third-party-advisory
- 1013895 vdb-entry vendor-advisory
- www.digitalparadox.org exploit
- 13493 exploit vdb-entry vendor-advisory
- articlelive-bypass-security(20431) vdb-entry