high7.5Public exploit code
CVE-2008-7179
OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMIN_Nome co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OTManager CMS 2.4 - Insecure Cookie Handling2008-06-27 · webapps · php · Verified
Impact
OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMIN_Nome cookies to certain values, as reachable in Admin/index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otmanager | Otmanager Cms | Version 2.4 |