CVE

Id
36860  
CVE No.
CVE-2008-6743  
Status
Candidate  
Description
RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verified cookie to an arbitrary value and performing a direct request to (1) delete.php, (2) edit-submit.php, (3) edit.php, (4) submit.php, and (5) update.php, which bypasses the security check that is performed by verify.php.  
Phase
Assigned (20090422)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401371 36860 CVE-2008-6743 MILW0RM:7497  View
401372 36860 CVE-2008-6743 URL:http://www.milw0rm.com/exploits/7497  View
401373 36860 CVE-2008-6743 BID:32886  View
401374 36860 CVE-2008-6743 URL:http://www.securityfocus.com/bid/32886  View
401375 36860 CVE-2008-6743 OSVDB:50802  View
401376 36860 CVE-2008-6743 URL:http://osvdb.org/50802  View
401377 36860 CVE-2008-6743 SECUNIA:33150  View
401378 36860 CVE-2008-6743 URL:http://secunia.com/advisories/33150  View
401379 36860 CVE-2008-6743 XF:rsmscript-verify-security-bypass(47451)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42003 JVNDB-2009-003010 dotProject における権限を取得される脆弱性 dotProject は、管理者ページへのアクセスを適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2008-6747 36860 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003010.html  View