CVE-2009-0864

CVE-2009-0864 describes an authentication bypass vulnerability in S-Cms 1.1 Stable, allowing remote attackers to gain administrative access by manipulating the "login" cookie. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.