CVE-2008-0350

EPSS 2.5%

admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to gain administrative privileges and make arbitrary configuration changes.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4884unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://evilsentinel.altervista.org/forum/index.php?topic=49.0 http://secunia.com/advisories/28427 https://www.exploit-db.com/exploits/4884 http://www.securityfocus.com/bid/27227