← Database

CVE-2009-1504

HIGH CVSS: 7.5 Published: 2009-05-01 Modified: 2026-06-16

Description

Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1."

Affected Platforms

Xigla Absolute Control Panel Xe

Weakness Type

CWE-287

References