Lucene search
HistoryApr 14, 2009 - 4:26 p.m.
CVE-2008-6723
cve-2008-6723
turnkeyforms entertainment portal
authentication bypass
remote attack
administrative access
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to Administrator.
Affected configurations
Node
turnkeyformsentertainment_portalMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| turnkeyforms:entertainment_portal | turnkeyforms entertainment portal | eq | 2.0 |
Related
nvd
nvd
CVE-2008-6723
2009-04-14 16:26:56
cvelist
cvelist
CVE-2008-6723
2009-04-14 16:00:00
prion
prion
Authentication flaw
2009-04-14 16:26:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
Related for CVE-2008-6723