CVE-2009-0108

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 09/01/2009 Updated: 29/09/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

PHPAuctions (aka PHPAuctionSystem) allows remote malicious users to bypass authentication and gain administrative access via modified (1) PHPAUCTION_RM_ID, (2) PHPAUCTION_RM_NAME, (3) PHPAUCTION_RM_USERNAME, and (4) PHPAUCTION_RM_EMAIL cookies.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpauctions phpauctions nil

[~] PHPAuctionSystem Insecure Cookie Handling Vuln [~] [~]---------------------------------------------------------- [~] Discovered By: ZoRLu msn: trt-turk@hotmailcom [~] [~] Date: 050109 [~] [~] Home: z0rlublogspotcom / wwwexperlcom [~] [~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( ( [~] [~] EN ONEMLi N0T: demolarI hackleyen top ...

CWE-264 http://www.securityfocus.com/bid/33120 http://secunia.com/advisories/33331 http://osvdb.org/51146 http://securityreason.com/securityalert/4891 https://www.exploit-db.com/exploits/7674 https://nvd.nist.gov https://www.exploit-db.com/exploits/7674/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-0108

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect