← Database

CVE-2009-1489

HIGH CVSS: 7.5 Published: 2009-04-29 Modified: 2026-06-16

Description

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter.

Affected Platforms

Rens Rikkerink Fungamez

Weakness Type

CWE-287

References