CVE-2009-1618: Teraway Livehelp

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&usr=&alias=admin&userid=1 value for the TWLHadmin cookie.

Affected products

• Teraway Livehelp: version 2.0 only

Published 2009-05-12. Last modified 2026-06-16.