medium6.8Public exploit code
CVE-2008-7156
EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EkinBoard 1.1.0 - Arbitrary File Upload / Authentication Bypass2008-01-07 · webapps · php · Verified
Impact
EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ekinboard | Ekinboard | through 1.1.0 |