PT-2009-1357 · Gobbl · Gobbl Cms

X0R · Published 2009-01-08 · Updated 2017-09-29 · CVE-2008-5880

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gobbl CMS version 1.0

Description The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the auth cookie to "ok".

Recommendations For Gobbl CMS version 1.0, consider implementing proper authentication mechanisms to prevent unauthorized access. As a temporary workaround, restrict access to admin/auth.php to minimize the risk of exploitation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-5880

Affected Products

Gobbl Cms

References · 5

• 🔥 http://securityfocus.com/bid/32918 · Exploit
• 🔥 https://exploit-db.com/exploits/7518 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5880 · Security Note
• http://secunia.com/advisories/33190 · Vendor Advisory
• http://securityreason.com/securityalert/4886 · Note