CVE-2008-0293

Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the show_foot function.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2008-01-16

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Freeseat (Freeseat)

References

• http://secunia.com/advisories/28459
• http://sourceforge.net/project/shownotes.php?group_id=160239&release_id=568374
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39648