PT-2008-6270 · Ccleague · Ccleague Pro

T0Pp8Uzz · Published 2008-11-18 · Updated 2017-09-29 · CVE-2008-5125

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CCleague Pro version 1.2

Description The issue allows remote attackers to bypass authentication. This is achieved by setting the type cookie value to admin in the admin.php file.

Recommendations For CCleague Pro version 1.2, consider restricting access to the admin.php file until a patch is available. As a temporary workaround, avoid using the type cookie or restrict its value to prevent unauthorized access.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-5125

Affected Products

Ccleague Pro

References · 6

• 🔥 https://exploit-db.com/exploits/5888 · Exploit
• 🔥 http://securityfocus.com/bid/29871 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5125 · Security Note
• http://secunia.com/advisories/30796 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43281 · Note
• http://securityreason.com/securityalert/4604 · Note