CVE

Id
34825  
CVE No.
CVE-2008-4708  
Status
Candidate  
Description
BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admin_session cookie to 1.  
Phase
Assigned (20081023)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381405 34825 CVE-2008-4708 MILW0RM:6621  View
381406 34825 CVE-2008-4708 URL:http://www.milw0rm.com/exploits/6621  View
381407 34825 CVE-2008-4708 BID:31462  View
381408 34825 CVE-2008-4708 URL:http://www.securityfocus.com/bid/31462  View
381409 34825 CVE-2008-4708 SREASON:4495  View
381410 34825 CVE-2008-4708 URL:http://securityreason.com/securityalert/4495  View
381411 34825 CVE-2008-4708 XF:bbzlphp-phorumadminsession-security-bypass(45498)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49668 JVNDB-2008-004978 LnBlog の pages/showblog.php におけるディレクトリトラバーサルの脆弱性 LnBlog の pages/showblog.php には、magic_quotes_gpc が無効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-4712 34825 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004978.html  View