CVE-2008-6855 Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie.
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xigla absolute news feed | = 1.0 | No fix listed |
| xigla absolute news feed | = 1.5 | No fix listed |
References
- 32472 third-party-advisory vendor-advisory
- 32027 exploit vdb-entry
- absolutenewsfeed-cookie-auth-bypass(46302) vdb-entry
- 6901 exploit