CVE-2010-4332 Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies.
HighCVSS 7.5
EPSS 6.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pangramsoft pointter php content management system | = 1.0 | No fix listed |
References
- 42662 third-party-advisory
- 15740 exploit
- 20101215 'Pointter PHP Content Management System' Unauthorized Privilege Escalation (CVE-2010-4332) mailing-list
- www.uncompiled.com exploit