← Database

CVE-2007-4419

CRITICAL CVSS: 9.3 Published: 2007-08-18 Modified: 2026-06-16

Description

Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.

Affected Platforms

Olate Olatedownload

Weakness Type

CWE-287

References