CVE-2008-3303

EPSS 5.4%

admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication and obtain administrative access via a direct request that sets the login, admin_login, password, and admin_passwd parameters.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6073unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31054 http://securityreason.com/securityalert/4036 https://exchange.xforce.ibmcloud.com/vulnerabilities/43762 https://www.exploit-db.com/exploits/6073 http://www.securityfocus.com/bid/30225