CVE-2008-4708 BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admin_session cookie to 1.
HighCVSS 7.5
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admin_session cookie to 1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sylvain pasquet bbzl.php | = 0.92 | No fix listed |
References
- 4495 third-party-advisory
- 31462 vdb-entry
- bbzlphp-phorumadminsession-security-bypass(45498) vdb-entry
- 6621 exploit