CVE-2008-0350 | BDVDB-2026-28787 Detail

Description#

admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to gain administrative privileges and make arbitrary configuration changes.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/4884
http://evilsentinel.altervista.org/forum/index.php?topic=49.0
http://secunia.com/advisories/28427
http://www.securityfocus.com/bid/27227

Exploit#

https://www.exploit-db.com/exploits/4884

History#

Version 12008-01-17Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.