CVE-2008-6763

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in…

published April 28, 2009

CVSS
—
EPSS
7%
Percentile
93.7
In the wild
Unconfirmed
What it is

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in cookie to that account's username.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06523 · 93.7th percentile
Published
2009-04-28T16:00Z
EPSS history
Timeline
  • 28 APR 16:00Z
    login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in…
    cvelistv5