CVE-2008-2682 | BDVDB-2026-31043 Detail

Description#

_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://bugreport.ir/index.php?/40
https://exchange.xforce.ibmcloud.com/vulnerabilities/42960
https://www.exploit-db.com/exploits/5766
http://secunia.com/advisories/30583
http://www.securityfocus.com/bid/29616

Exploit#

https://www.exploit-db.com/exploits/5766

History#

Version 12008-06-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.