NVD

Id
6855  
Name
CVE-2008-7124  
Description
zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as demonstrated by adding a new administrator.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-08-31  
Modified Date
2009-08-31  
Seq
2008-7124  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38964 6855 CVE-2008-7124 5219  View
38965 6855 CVE-2008-7124 5220  View
38966 6855 CVE-2008-7124 28149  View
38967 6855 CVE-2008-7124 http://www.zkup.fr/actualite-zkup/maj-critique-v203v204.html  View
38968 6855 CVE-2008-7124 zkup-modifier-authentication-bypass(41068)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44691 JVNDB-2009-005698 zKup CMS における管理者権限を取得される脆弱性 zKup CMS は、admin/configuration/modifier.php の管理認証が必要ないため、管理者権限を取得される脆弱性が存在します。 CVE-2008-7124 37237 CVE-2008-7124 6855 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005698.html 2009-08-31 2012-12-20 View