high7.5Public exploit code
CVE-2008-6714
admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- xeCMS 1.0.0 RC2 - Insecure Cookie Handling2008-06-14 · webapps · php · Verified
Impact
admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xecms Project | Xecms | Version 1.0.0 |