CVE-2008-6231

critical

Description

Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".

References

https://www.exploit-db.com/exploits/7000

https://exchange.xforce.ibmcloud.com/vulnerabilities/46390

http://www.vupen.com/english/advisories/2008/3019

http://www.securityfocus.com/bid/32126

http://secunia.com/advisories/32557

Details

Source: Mitre, NVD

Published: 2009-02-20

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.03253

Detections

Analytics