CVEvulnerability
CVE-2009-0412
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-02-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt.
Affected configurations
• interspire shopping cart 4.0.1
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.securityfocus.com/archive/1/499967/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33212 www.securityfocus.com
- http://www.securitytracker.com/id?1021557 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47899 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/archive/1/499967/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33212 www.securityfocus.com
- http://www.securitytracker.com/id?1021557 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47899 exchange.xforce.ibmcloud.com