Lucene search
HistoryFeb 26, 2009 - 4:17 p.m.
CVE-2008-6294
cve-2008-6294
acc statistics
authentication bypass
remote code execution
nvd
7.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.8%
admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie cookie to “admin.”
Affected configurations
Node
accscriptsacc_statisticsMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| accscripts:acc_statistics | accscripts acc statistics | eq | 1.1 |
Related
nvd
nvd
CVE-2008-6294
2009-02-26 16:17:19
cvelist
cvelist
CVE-2008-6294
2009-02-26 16:00:00
prion
prion
Authentication flaw
2009-02-26 16:17:00
7.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.8%
Related for CVE-2008-6294