Lucene search
HistoryMay 18, 2008 - 2:20 p.m.
CVE-2008-2298
cve-2008-2298
web slider
admin.php
authentication bypass
remote attackers
privilege escalation
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.4%
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1.
Affected configurations
Node
sourceforgeweb_sliderMatch0.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| sourceforge:web_slider | sourceforge web slider | eq | 0.6 |
Related
prion
prion
Authentication flaw
2008-05-18 14:20:00
cvelist
cvelist
CVE-2008-2298
2008-05-18 14:00:00
nvd
nvd
CVE-2008-2298
2008-05-18 14:20:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.4%
Related for CVE-2008-2298