CVE-2008-6743

RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verified cookie to an arbitrary value and…

published April 22, 2009

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verified cookie to an arbitrary value and performing a direct request to (1) delete.php, (2) edit-submit.php, (3) edit.php, (4) submit.php, and (5) update.php, which bypasses the security check that is performed by verify.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02588 · 85.1th percentile
Published
2009-04-22T21:00Z
EPSS history
Timeline
  • 22 APR 21:00Z
    RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verified cookie to an arbitrary value and…
    cvelistv5