CVE-2008-6714

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie

published April 10, 2009

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12030 · 96.1th percentile
Published
2009-04-10T15:00Z
EPSS history
Timeline
  • 10 APR 15:00Z
    admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie
    cvelistv5