← Database

CVE-2009-1618

HIGH CVSS: 7.5 Published: 2009-05-12 Modified: 2026-06-16

Description

Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&usr=&alias=admin&userid=1 value for the TWLHadmin cookie.

Affected Platforms

Teraway Livehelp

Weakness Type

CWE-287

References