CVE-2009-1638 - Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login

Back Back to CVE browser

HIGH

Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login

Published May 15, 2009

7.5

HIGH

CVSS 2.0

EPSS 2.61%

Description

Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (5)

http://osvdb.org/54278
vdb-entryx_refsource_OSVDBExploit
http://secunia.com/advisories/34996
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34865
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/50370
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8627
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/54278		vdb-entryx_refsource_OSVDBExploit
http://secunia.com/advisories/34996		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34865		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/50370		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8627		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 15, 2009

Updated Aug 7, 2024

Reserved May 15, 2009

Link CVE-2009-1638

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1638

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1638