Auth bypass in Desiscripts Desi Short Url Script

CVE-2009-2642

index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13.

Vulnerability class: Broken Authentication

EPSS: 0.024 (82.5th percentile) — read the EPSS interpretation.