NVD

Id
6755  
Name
CVE-2008-7024  
Description
admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to "admin" and setting the name parameter to "users."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-08-21  
Modified Date
2009-08-24  
Seq
2008-7024  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38618 6755 CVE-2008-7024 6584  View
38619 6755 CVE-2008-7024 20080926 The Gemini Portal <= 4.7 / Insecure Cookie Handling Vulnerability  View
38620 6755 CVE-2008-7024 31429  View
38621 6755 CVE-2008-7024 geminiportal-admin-security-bypass(45439)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42090 JVNDB-2009-003097 Arz Development The Gemini Portal の admin.php における管理者権限を取得される脆弱性 Arz Development The Gemini Portal の admin.php には、認証を回避される、および管理者権限を取得される脆弱性が存在します。 CVE-2008-7024 37137 CVE-2008-7024 6755 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003097.html 2009-08-21 2012-06-26 View