CVE-2008-5784

EUVD-2008-5754 · Published Dec 31, 2008

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1.

Technologies

V3Chat V3 Chat Profiles Dating Script

Weaknesses

CWE-565

CVSS scores

v3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Credential Access

T1190Exploit Public-Facing Application T1539Steal Web Session Cookie

References

http://www.securityfocus.com/bid/32216
https://www.exploit-db.com/exploits/7063
http://secunia.com/advisories/32603
http://www.vupen.com/english/advisories/2008/3071
https://exchange.xforce.ibmcloud.com/vulnerabilities/46479

Potentially impacted assets

See if this affects your attack surface

CVE-2008-5784

Technologies

Weaknesses

CVSS scores

MITRE ATT&CK

References

Potentially impacted assets

Our latest news

PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)

Manage External Security Across All Your Entities

Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34

Take 15 minutes to discover our platform with our experts