CVE-2010-4333 Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies.

HighCVSS 7.5 EPSS 7.0% Public exploit

Published: 2010-12-22 03:00
Updated: 2026-06-17 02:24
Exploit status: Public exploit available

Description

Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies.

Affected products

Product	Affected versions	Fixed in
pangramsoft pointter php micro-blogging social network	= 1.8	No fix listed

References

15741 exploit
20101215 'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation (CVE-2010-4333) mailing-list
www.uncompiled.com

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 6.98% (percentile 94.2)
CWE: CWE-287

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Pointter PHP Micro-Blogging Social Network - Unauthorized Privilege Escalation Exploit · Exploit Database (OffSec) · 2010-12-15