CVE-2008-7024 | BDVDB-2026-38010 Detail

Description#

admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to "admin" and setting the name parameter to "users."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/31429
https://www.exploit-db.com/exploits/6584
http://secunia.com/advisories/32057
http://www.securityfocus.com/archive/1/496761/100/0/threaded
http://osvdb.org/48639
https://exchange.xforce.ibmcloud.com/vulnerabilities/45439

Exploit#

https://www.exploit-db.com/exploits/6584

History#

Version 12009-08-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.