CVE

Id
32799  
CVE No.
CVE-2008-2682  
Status
Candidate  
Description
_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.  
Phase
Assigned (20080611)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
355032 32799 CVE-2008-2682 MILW0RM:5766  View
355033 32799 CVE-2008-2682 URL:http://www.milw0rm.com/exploits/5766  View
355034 32799 CVE-2008-2682 MISC:http://bugreport.ir/index.php?/40  View
355035 32799 CVE-2008-2682 BID:29616  View
355036 32799 CVE-2008-2682 URL:http://www.securityfocus.com/bid/29616  View
355037 32799 CVE-2008-2682 SECUNIA:30583  View
355038 32799 CVE-2008-2682 URL:http://secunia.com/advisories/30583  View
355039 32799 CVE-2008-2682 XF:realm-login-authentication-bypass(42960)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47844 JVNDB-2008-003154 Flux CMS の webinc/bxe/scripts/loadsave.php における任意のコードを実行される脆弱性 Flux CMS の webinc/bxe/scripts/loadsave.php には、任意のコードを実行される脆弱性が存在します。 CVE-2008-2686 32799 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003154.html  View