CVE-2008-6523

auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie

published March 25, 2009

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this can be leveraged with a separate vulnerability in resetpass.php to modify passwords for arbitrary users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02561 · 84.9th percentile
Published
2009-03-25T18:00Z
EPSS history
Timeline
  • 25 MAR 18:00Z
    auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie
    cvelistv5