Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
https://www.exploit-db.com/exploits/6050 | exploit |
http://www.securityfocus.com/bid/30199 | vdb entry exploit |
https://exchange.xforce.ibmcloud.com/vulnerabilities/43744 | vdb entry |