VULNERABILITY INTELLIGENCE
CVE-2009-2642
CVSS score7.5 NONE
EPSS probability2.42%
CISA KEVNot currently listed
Published2009-07-28
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13.
Weakness classification
- nvd@nist.gov: CWE-287