CVE-2009-2293: Tutorial-Share Tutorial Share

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the usernamed cookie parameter.

Affected products

• Tutorial-Share Tutorial Share: up to and including 3.5.0; version 3.0.0 only; version 3.0.1 only

Published 2009-07-01. Last modified 2026-06-16.