CVE

Id
35990  
CVE No.
CVE-2008-5873  
Status
Candidate  
Description
Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta[sesion] cookie that has a value beginning with 1:1: followed by a username.  
Phase
Assigned (20090108)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
395158 35990 CVE-2008-5873 MILW0RM:6691  View
395159 35990 CVE-2008-5873 URL:http://www.milw0rm.com/exploits/6691  View
395160 35990 CVE-2008-5873 BID:31619  View
395161 35990 CVE-2008-5873 URL:http://www.securityfocus.com/bid/31619  View
395162 35990 CVE-2008-5873 SECUNIA:32093  View
395163 35990 CVE-2008-5873 URL:http://secunia.com/advisories/32093  View
395164 35990 CVE-2008-5873 SREASON:4883  View
395165 35990 CVE-2008-5873 URL:http://securityreason.com/securityalert/4883  View
395166 35990 CVE-2008-5873 XF:yerbasacphp-galletasesion-security-bypass(45734)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44303 JVNDB-2009-005310 Phpclanwebsite における SQL インジェクションの脆弱性 Phpclanwebsite には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-5877 35990 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005310.html  View