high7.5Public exploit code
CVE-2008-6716
homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows remote attackers to have an unspecified …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pre ADS Portal 2.0 - Authentication Bypass / Cross-Site Scripting2008-11-06 · webapps · php · Verified
Impact
homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows remote attackers to have an unspecified impact via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Preprojects | Pre Ads Portal | through 2.0 |