CVE

Id
37241  
CVE No.
CVE-2008-7124  
Status
Candidate  
Description
zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as demonstrated by adding a new administrator.  
Phase
Assigned (20090831)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
404258 37241 CVE-2008-7124 MILW0RM:5219  View
404259 37241 CVE-2008-7124 URL:http://www.milw0rm.com/exploits/5219  View
404260 37241 CVE-2008-7124 MILW0RM:5220  View
404261 37241 CVE-2008-7124 URL:http://www.milw0rm.com/exploits/5220  View
404262 37241 CVE-2008-7124 CONFIRM:http://www.zkup.fr/actualite-zkup/maj-critique-v203v204.html  View
404263 37241 CVE-2008-7124 BID:28149  View
404264 37241 CVE-2008-7124 URL:http://www.securityfocus.com/bid/28149  View
404265 37241 CVE-2008-7124 OSVDB:43081  View
404266 37241 CVE-2008-7124 URL:http://osvdb.org/43081  View
404267 37241 CVE-2008-7124 SECUNIA:29276  View
404268 37241 CVE-2008-7124 URL:http://secunia.com/advisories/29276  View
404269 37241 CVE-2008-7124 XF:zkup-modifier-authentication-bypass(41068)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44692 JVNDB-2009-005699 XySSL の ssl_parse_client_key_exchange 関数における鍵を回復される脆弱性 XySSL の ssl_parse_client_key_exchange 関数は、暗号化したテキストを使用する特定の Bleichenbacher 攻撃から保護しないため、鍵を回復される脆弱性が存在します。 CVE-2008-7128 37241 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005699.html  View