CVE-2001-1536

Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack.

• CWE-312

• http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-11/0225.htmlBroken Link
• http://www.iss.net/security_center/static/7621.phpBroken Link
• http://www.securityfocus.com/bid/3587Broken Link, Third Party Advisory, VDB Entry
• http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-11/0225.htmlBroken Link
• http://www.iss.net/security_center/static/7621.phpBroken Link
• http://www.securityfocus.com/bid/3587Broken Link, Third Party Advisory, VDB Entry

Published

Dec 31, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-1530run.cgi in Webmin 0.80 and 0.88 creates temporary files with…
• CVE-2001-1531Buffer overflow in Claris Emailer 2.0v2 allows remote attack…
• CVE-2001-1532WebX stores authentication information in the HTTP_REFERER v…
• CVE-2001-1533Microsoft Internet Security and Acceleration (ISA) Server 20…5.3
• CVE-2001-1534mod_usertrack in Apache 1.3.11 through 1.3.20 generates sess…
• CVE-2001-1535Slashcode 2.0 creates new accounts with an 8-character rando…
• CVE-2001-1537The default "basic" security setting' in config.php for TWIG…7.5
• CVE-2001-1538SpeedXess HA-120 DSL router has a default administrative pas…
• CVE-2001-1539Stack consumption vulnerability in Internet Explorer The Jav…
• CVE-2001-1540IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cau…
• CVE-2001-1541Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI…
• CVE-2001-1542NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter…