Skip to content

CVE-2008-5738 Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtai...

HighCVSS 7.5 EPSS 2.6% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information.

Affected products

ProductAffected versionsFixed in
nodstrum mysql calendar = 1.1 No fix listed
nodstrum mysql calendar = 1.2 No fix listed

References

  • 50827 exploit vdb-entry
  • 33214 third-party-advisory vendor-advisory
  • 4816 third-party-advisory
  • 32914 vdb-entry
  • 7513 exploit