medium6.8Public exploit code
CVE-2008-6665
change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Anata CMS 1.0b5 - 'change.php' Arbitrary Add Admin2008-06-15 · webapps · php · Verified
Impact
change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Anantasoft | Ananta Cms | Version 1.0b5 |