Lucene search
MitreCVE-2008-6294HistoryFeb 26, 2009 - 4:17 p.m.
CVE-2008-6294
2009-02-2616:17:19
CWE-264
mitre
web.nvd.nist.gov
23
cve-2008-6294
acc statistics
authentication bypass
remote code execution
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.006
Percentile
78.8%
admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie cookie to “admin.”
Affected configurations
Node
accscriptsacc_statisticsMatch1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| accscripts | acc_statistics | 1.1 | cpe:2.3:a:accscripts:acc_statistics:1.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2008-6294
2009-02-26 16:00:00
nvd
nvd
CVE-2008-6294
2009-02-26 16:17:19
prion
prion
Authentication flaw
2009-02-26 16:17:00
exploitdb
exploitdb
Acc Autos 4.0 - Insecure Cookie Handling
2008-11-03 00:00:00
Acc Real Estate 4.0 - Insecure Cookie Handling
2008-11-03 00:00:00
Acc Statistics 1.1 - Insecure Cookie Handling
2008-11-03 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.006
Percentile
78.8%
Related for CVE-2008-6294