CVE

Id
67084  
CVE No.
CVE-2013-7137  
Status
Candidate  
Description
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1.  
Phase
Assigned (20131218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
648240 67084 CVE-2013-7137 BUGTRAQ:20140108 Improper Authentication in Burden  View
648241 67084 CVE-2013-7137 URL:http://www.securityfocus.com/archive/1/archive/1/530703/100/0/threaded  View
648242 67084 CVE-2013-7137 EXPLOIT-DB:30916  View
648243 67084 CVE-2013-7137 URL:http://www.exploit-db.com/exploits/30916  View
648244 67084 CVE-2013-7137 MISC:https://www.htbridge.com/advisory/HTB23192  View
648245 67084 CVE-2013-7137 CONFIRM:https://github.com/joshf/Burden/commit/edaa1bb8f73d6f3c8b2e78b67f1b40e02fccd0c1  View
648246 67084 CVE-2013-7137 CONFIRM:https://github.com/joshf/Burden/issues/2  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24361 JVNDB-2013-005936 Open-Xchange AppSuite におけるクロスサイトスクリプティングの脆弱性 Open-Xchange (OX) AppSuite には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-7142 67084 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005936.html  View