PT-2008-5919 · Bbzl · Bbzl.Php

Stack · Published 2008-10-23 · Updated 2017-09-29 · CVE-2008-4708

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BbZL.PhP version 0.92

Description The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the phorum admin session cookie to 1, allowing unauthorized access to administrative functions.

Recommendations For BbZL.PhP version 0.92, consider restricting access to administrative areas until a fix is available, and avoid using the phorum admin session cookie as a sole means of authentication. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-4708

Affected Products

Bbzl.Php

References · 5

• 🔥 https://exploit-db.com/exploits/6621 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4708 · Security Note
• http://securityfocus.com/bid/31462 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45498 · Note
• http://securityreason.com/securityalert/4495 · Note