NVD

Id
2923  
Name
CVE-2008-3033  
Description
RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to access admin functions and have unspecified other impact, as demonstrated by (1) an IdFlux request to supprimer_flux.php and (2) a TpsRafraich request to modifier_tps_rafraich.php.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-07-07  
Modified Date
2009-01-29  
Seq
2008-3033  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18509 2923 CVE-2008-3033 3975  View
18510 2923 CVE-2008-3033 20080630 RSS-aggregator Multiple vulnerabilities  View
18511 2923 CVE-2008-3033 30016  View
18512 2923 CVE-2008-3033 rssaggregator-admin-security-bypass(43509)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50659 JVNDB-2008-005969 RSS-aggregator における admin 関数へアクセスされ脆弱性 RSS-aggregator は、admin/fonctions/ ディレクトリに対する管理者認証を必要としないため、admin 関数へアクセスされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2008-3033 33146 CVE-2008-3033 2923 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005969.html 2008-07-07 2012-12-20 View