CVE-2008-6919

profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "fook!admin."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
taskdrivertaskdriver
𝑥
≤ 1.3
taskdrivertaskdriver
1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/25221
http://www.securityfocus.com/bid/33030
https://exchange.xforce.ibmcloud.com/vulnerabilities/47608
https://www.exploit-db.com/exploits/7605
http://secunia.com/advisories/25221
http://www.securityfocus.com/bid/33030
https://exchange.xforce.ibmcloud.com/vulnerabilities/47608
https://www.exploit-db.com/exploits/7605