CVE-2008-2293 admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1.
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tpvgames mpcs | = 1.0 | No fix listed |
| tpvgames mpcs | = 1.1 | No fix listed |
References
- 30255 third-party-advisory
- 29244 exploit vdb-entry
- mpcs-cookie-auth-bypass(42463) vdb-entry
- 5630 exploit