PT-2008-4978 · Uphp · Php-Ring Webring System

Hadihadi · Publicado 2008-08-12 · Atualizado 2017-09-29 · CVE-2008-3602

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP-Ring Webring System (aka uPHP ring website) version 0.9.1

Description The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the admin cookie to 1, effectively allowing unauthorized access to administrative functions.

Recommendations For PHP-Ring Webring System (aka uPHP ring website) version 0.9.1, consider temporarily disabling the administrative access functionality until a patch is available. Restrict access to the admin/wr admin.php file to minimize the risk of exploitation. Avoid relying solely on the admin cookie for authentication until the issue is resolved.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-3602

Produtos afetados

Php-Ring Webring System

Referências · 5

• 🔥 http://securityfocus.com/bid/30624 · Exploit
• 🔥 https://exploit-db.com/exploits/6225 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-3602 · Nota de Segurança
• http://securityreason.com/securityalert/4143 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44379 · Nota