CVE-2009-0412

HIGH 7.5CVE-2009-0412 · Published 03/02/2009 · updated 16/06/2026

In short

CVE-2009-0412 is a HIGH (CVSS 7.5) vulnerability affecting shopping cart (interspire).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 75.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
shopping cart interspire	`= 4.0.1`	No fix yet

Description

The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt.

References

securityfocus.com/archive/1/499967/100/0/threaded
securityfocus.com/bid/33212
securitytracker.com/id
exchange.xforce.ibmcloud.com/vulnerabilities/47899

More vulnerabilities in shopping cart

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free