X0r has discovered a vulnerability in tlAds, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to the application allowing access to the admin interface by checking if a certain cookie exists. This can be exploited to gain administrative access to the application by creating the cookie "tlAds_login" and assigning it the value "admin".

This vulnerability is confirmed in version 1.0. Other versions may also be affected.

Solution
Ensure that proper access restrictions are implemented.

Provided and/or discovered by
X0r

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/6848

Deep Links
Links available to Secunia VIM customers