CVE-2008-6966 AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php.
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aj square aj auction | = 1.0 | No fix listed |
References
- 32243 exploit vdb-entry
- ajauction-admin-authentication-bypass(46528) vdb-entry
- 7087 exploit