CVE:CVE-2009-1638
CNNVD:CNNVD-200905-196
Techno Dreams Job Career是一款基于ASP脚本的招聘信息网站管理工具包。
Techno Dreams Job Career Package 3.0版本允许远程攻击者通过设置JobCareerAdmin cookie到Login,绕过权限并获得管理访问权。
solution:Upgrade t-dreams job_career_package to a higher version than 3.0,and avoid the version 3.0