CVE-2008-0293 Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors...
MediumCVSS 6.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the show_foot function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freeseat | <= 1.1.5c | No fix listed |
References
- 28459 third-party-advisory vendor-advisory
- sourceforge.net
- freeseat-cron-security-bypass(39648) vdb-entry