PT-2008-6833 · V3 · V3 Chat Live Support

Cyber-Zone · Publicado 2008-12-31 · Atualizado 2017-09-29 · CVE-2008-5783

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions V3 Chat Live Support version 3.0.4

Description The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the admin cookie to 1, effectively allowing unauthorized access to administrative functions.

Recommendations For V3 Chat Live Support version 3.0.4, consider disabling the administrative access functionality until a patch is available, or restrict access to the admin/index.php endpoint to minimize the risk of exploitation.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-5783

Produtos afetados

V3 Chat Live Support

Referências · 8

• 🔥 https://exploit-db.com/exploits/7063 · Exploit
• 🔥 https://exploit-db.com/exploits/7069 · Exploit
• 🔥 http://securityfocus.com/bid/32216 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5783 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46481 · Nota
• http://secunia.com/advisories/32603 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/3066 · Nota
• http://securityreason.com/securityalert/4843 · Nota