NVD

Id
1907  
Name
CVE-2008-1971  
Description
phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain privileges by setting the (1) phadmin cookie to admin.php, or (2) in 1.4 and earlier, the ssbadmin cookie to shoutadmin.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-04-27  
Modified Date
2008-09-05  
Seq
2008-1971  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12372 1907 CVE-2008-1971 5467  View
12373 1907 CVE-2008-1971 28856  View
12374 1907 CVE-2008-1971 phshoutbox-admin-security-bypass(41901)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50416 JVNDB-2008-005726 phShoutBox Final における権限を取得される脆弱性 phShoutBox Final は、$_POST で指定されている場合にのみパスワードをチェックするため、権限を取得される脆弱性が存在します。 CVE-2008-1971 32084 CVE-2008-1971 1907 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005726.html 2008-04-27 2012-12-20 View