CVE-2008-7024

admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to "admin" and setting the name parameter to "users."

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.53% chance of exploitation in the next 30 days, 85th percentile

Published

2009-08-21

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/6584

Security advisories

• http://secunia.com/advisories/32057
• http://www.securityfocus.com/bid/31429

References

• CVE Record
• NVD entry