CVE-2008-2682 _RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName...
HighCVSS 7.5
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realm project realm cms | = 2.3 | No fix listed |
References
- bugreport.ir exploit
- 30583 third-party-advisory vendor-advisory
- 29616 vdb-entry
- realm-login-authentication-bypass(42960) vdb-entry
- 5766 exploit