PT-2008-5919 · Bbzl · Bbzl.Php

Stack · Publicado 2008-10-23 · Atualizado 2017-09-29 · CVE-2008-4708

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BbZL.PhP version 0.92

Description The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the phorum admin session cookie to 1, allowing unauthorized access to administrative functions.

Recommendations For BbZL.PhP version 0.92, consider restricting access to administrative areas until a fix is available, and avoid using the phorum admin session cookie as a sole means of authentication. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-4708

Produtos afetados

Bbzl.Php

Referências · 5

• 🔥 https://exploit-db.com/exploits/6621 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4708 · Nota de Segurança
• http://securityfocus.com/bid/31462 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45498 · Nota
• http://securityreason.com/securityalert/4495 · Nota