CVE-2008-3303

2008-07-2513:18:00

mitre

www.cve.org

AI Score

6.9

Confidence

Low

EPSS

0.008

Percentile

82.3%

JSON

admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication and obtain administrative access via a direct request that sets the login, admin_login, password, and admin_passwd parameters.

References

secunia.com/advisories/31054

securityreason.com/securityalert/4036

www.securityfocus.com/bid/30225

exchange.xforce.ibmcloud.com/vulnerabilities/43762

www.exploit-db.com/exploits/6073