← Database

CVE-2009-0412

HIGH CVSS: 7.5 Published: 2009-02-03 Modified: 2026-06-16

Description

The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt.

Affected Platforms

Interspire Shopping Cart

Weakness Type

CWE-287

References