high7.5Public exploit code
CVE-2008-4341
add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and logi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MyBlog 0.9.8 - Insecure Cookie Handling2008-09-22 · webapps · php · Verified
Impact
add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myblog | Myblog | through 0.9.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/31311
- http://www.vupen.com/english/advisories/2008/2654
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45576
- https://www.exploit-db.com/exploits/6531
- http://www.securityfocus.com/bid/31311
- http://www.vupen.com/english/advisories/2008/2654
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45576
- https://www.exploit-db.com/exploits/6531