CVE-2008-6665 change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection.
MediumCVSS 6.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| anantasoft ananta cms | = 1.0b5 | No fix listed |
References
- 29752 exploit vdb-entry
- anata-change-auth-bypass(43119) vdb-entry
- 5824 exploit