CVE-2008-6231

Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2009-02-20

Last modified

2024-08-07

Weaknesses

CWE-255

Affected products

• Pre Classified Listings (Preprojects)

References

• http://secunia.com/advisories/32557
• http://www.securityfocus.com/bid/32126
• http://www.vupen.com/english/advisories/2008/3019
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46390
• https://www.exploit-db.com/exploits/7000