CVEvulnerability
CVE-2008-2682
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.
Affected configurations
• realm project realm cms 2.3
Related
Weakness · not in database (1)
References
- http://bugreport.ir/index.php?/40 Exploit
- http://secunia.com/advisories/30583 Vendor Advisory
- http://www.securityfocus.com/bid/29616 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42960 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5766 www.exploit-db.com
- http://bugreport.ir/index.php?/40 Exploit
- http://secunia.com/advisories/30583 Vendor Advisory
- http://www.securityfocus.com/bid/29616 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42960 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5766 www.exploit-db.com