CVE-2008-7007 Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and gain administrative access by setting the (1) admin_name and (2) admin_pass cookie values to 1.
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and gain administrative access by setting the (1) admin_name and (2) admin_pass cookie values to 1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpversion php vx guestbook | = 1.06 | No fix listed |
References
- 48155 vdb-entry
- 31850 third-party-advisory vendor-advisory
- 31174 exploit vdb-entry
- freephpvx-adminname-security-bypass(45152) vdb-entry
- 6457 exploit