CVE-2008-4784

aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a cookie to "A" or "O" in (1)…

published October 29, 2008

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a cookie to "A" or "O" in (1) edit_delete.php, (2) edit_cat.php, (3) edit_lock.php, and (4) edit_form.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02773 · 86.2th percentile
Published
2008-10-29T14:00Z
EPSS history
Timeline
  • 29 OCT 14:00Z
    aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a cookie to "A" or "O" in (1)…
    cvelistv5