PT-2008-6270 · Ccleague · Ccleague Pro

T0Pp8Uzz · Publicado 2008-11-18 · Atualizado 2017-09-29 · CVE-2008-5125

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CCleague Pro version 1.2

Description The issue allows remote attackers to bypass authentication. This is achieved by setting the type cookie value to admin in the admin.php file.

Recommendations For CCleague Pro version 1.2, consider restricting access to the admin.php file until a patch is available. As a temporary workaround, avoid using the type cookie or restrict its value to prevent unauthorized access.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-5125

Produtos afetados

Ccleague Pro

Referências · 6

• 🔥 https://exploit-db.com/exploits/5888 · Exploit
• 🔥 http://securityfocus.com/bid/29871 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43281 · Nota
• http://securityreason.com/securityalert/4604 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5125 · Nota de Segurança
• http://secunia.com/advisories/30796 · Aviso do Fabricante