CVE

Id
37141  
CVE No.
CVE-2008-7024  
Status
Candidate  
Description
admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to "admin" and setting the name parameter to "users."  
Phase
Assigned (20090821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403482 37141 CVE-2008-7024 BUGTRAQ:20080926 The Gemini Portal <= 4.7 / Insecure Cookie Handling Vulnerability  View
403483 37141 CVE-2008-7024 URL:http://www.securityfocus.com/archive/1/archive/1/496761/100/0/threaded  View
403484 37141 CVE-2008-7024 MILW0RM:6584  View
403485 37141 CVE-2008-7024 URL:http://www.milw0rm.com/exploits/6584  View
403486 37141 CVE-2008-7024 BID:31429  View
403487 37141 CVE-2008-7024 URL:http://www.securityfocus.com/bid/31429  View
403488 37141 CVE-2008-7024 OSVDB:48639  View
403489 37141 CVE-2008-7024 URL:http://osvdb.org/48639  View
403490 37141 CVE-2008-7024 SECUNIA:32057  View
403491 37141 CVE-2008-7024 URL:http://secunia.com/advisories/32057  View
403492 37141 CVE-2008-7024 XF:geminiportal-admin-security-bypass(45439)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42093 JVNDB-2009-003100 RPG.Board における権限を取得される脆弱性 RPG.Board には、認証を回避される、および権限を取得される脆弱性が存在します。 CVE-2008-7028 37141 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003100.html  View