PT-2010-1617 · Graugon · Graugon Php Article Publisher

X0R · Publicado 2010-04-23 · Atualizado 2017-09-19 · CVE-2009-4808

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Graugon PHP Article Publisher version 1.0

Description The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the g admin cookie to 1, effectively allowing unauthorized access to administrative functions.

Recommendations For Graugon PHP Article Publisher version 1.0, consider disabling access to the admin.php file until a proper authentication mechanism is implemented to prevent unauthorized administrative access. Restrict access to the g admin cookie to minimize the risk of exploitation.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2009-4808

Produtos afetados

Graugon Php Article Publisher

Referências · 7

• 🔥 http://exploit-db.com/exploits/8133 · Exploit
• 🔥 https://exploit-db.com/exploits/8133 · Exploit
• 🔥 https://exploit-db.com/exploits/6929 · Exploit
• 🔥 http://securityfocus.com/bid/33952 · Exploit
• http://secunia.com/advisories/34126 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4808 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49034 · Nota