CVE-2008-6300 Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the (1) gwm_user and (2) gwm_pass cookies to admin. NOTE: the provenance of this inf...
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the (1) gwm_user and (2) gwm_pass cookies to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gwm galatolo webmanager | = 1.3a | No fix listed |
References
- 30247 exploit vdb-entry
- www.securityfocus.com exploit
- galatolo-cookie-security-bypass(46678) vdb-entry