CVE

Id
36880  
CVE No.
CVE-2008-6763  
Status
Candidate  
Description
login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in cookie to that account"s username.  
Phase
Assigned (20090428)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401517 36880 CVE-2008-6763 MILW0RM:7601  View
401518 36880 CVE-2008-6763 URL:http://www.milw0rm.com/exploits/7601  View
401519 36880 CVE-2008-6763 BID:33031  View
401520 36880 CVE-2008-6763 URL:http://www.securityfocus.com/bid/33031  View
401521 36880 CVE-2008-6763 OSVDB:47941  View
401522 36880 CVE-2008-6763 URL:http://www.osvdb.org/47941  View
401523 36880 CVE-2008-6763 SECUNIA:31801  View
401524 36880 CVE-2008-6763 URL:http://secunia.com/advisories/31801  View
401525 36880 CVE-2008-6763 XF:silentumloginsys-loggedin-security-bypass(47616)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44571 JVNDB-2009-005578 WordPress の wp-admin/upgrade.php におけるアプリケーションをアップグレードされる脆弱性 WordPress の wp-admin/upgrade.php には、アプリケーションをアップグレードされる、およびサービス運用妨害 (アプリケーションの停止) 状態となる脆弱性が存在します。 CVE-2008-6767 36880 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005578.html  View