PT-2008-6833 · V3 · V3 Chat Live Support

Cyber-Zone · Published 2008-12-31 · Updated 2017-09-29 · CVE-2008-5783

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions V3 Chat Live Support version 3.0.4

Description The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the admin cookie to 1, effectively allowing unauthorized access to administrative functions.

Recommendations For V3 Chat Live Support version 3.0.4, consider disabling the administrative access functionality until a patch is available, or restrict access to the admin/index.php endpoint to minimize the risk of exploitation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-5783

Affected Products

V3 Chat Live Support

References · 8

• 🔥 https://exploit-db.com/exploits/7063 · Exploit
• 🔥 https://exploit-db.com/exploits/7069 · Exploit
• 🔥 http://securityfocus.com/bid/32216 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5783 · Security Note
• http://secunia.com/advisories/32603 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46481 · Note
• http://vupen.com/english/advisories/2008/3066 · Note
• http://securityreason.com/securityalert/4843 · Note