PT-2008-4978 · Uphp · Php-Ring Webring System

Hadihadi · Published 2008-08-12 · Updated 2017-09-29 · CVE-2008-3602

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP-Ring Webring System (aka uPHP ring website) version 0.9.1

Description The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the admin cookie to 1, effectively allowing unauthorized access to administrative functions.

Recommendations For PHP-Ring Webring System (aka uPHP ring website) version 0.9.1, consider temporarily disabling the administrative access functionality until a patch is available. Restrict access to the admin/wr admin.php file to minimize the risk of exploitation. Avoid relying solely on the admin cookie for authentication until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-3602

Affected Products

Php-Ring Webring System

References · 5

• 🔥 http://securityfocus.com/bid/30624 · Exploit
• 🔥 https://exploit-db.com/exploits/6225 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-3602 · Security Note
• http://securityreason.com/securityalert/4143 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44379 · Note