CVE-2008-6001 index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field,...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adnforum | <= 1.0b | No fix listed |
References
- 18300 third-party-advisory vendor-advisory
- 31383 exploit vdb-entry
- adnforum-index-security-bypass(45400) vdb-entry
- 6557 exploit