CVE-2008-6269

Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the (1) session_id…

published February 25, 2009

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the (1) session_id, session_logged_in, and session_username cookies for user privileges; (2) session_admin_id, session_admin_username, and session_admin cookies for admin privileges; and (3) session_staff_id, session_staff_username, and session_staff cookies for staff users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02588 · 85.2th percentile
Published
2009-02-25T11:00Z
EPSS history
Timeline
  • 25 FEB 11:00Z
    Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the (1) session_id…
    cvelistv5