Description
ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie.
References
- 20050503 Authentication bypass, sql injections and xss in ArticleLive 2005 mailing-list
- 13493 vdb-entry
- 15250 third-party-advisory
- http://www.digitalparadox.org/advisories/inal.txt
- articlelive-bypass-security(20431) vdb-entry
- 1013895 vdb-entry