CVEvulnerability
CVE-2008-3268
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator email address knowledge to bypass restrictions and gain privileges via unspecified vectors related to login names. NOTE: some of these details are obtained from third party information.
Affected configurations
• brickhost phpscheduleit 1.2.0
• brickhost phpscheduleit 1.2.1
• brickhost phpscheduleit 1.2.2
• brickhost phpscheduleit 1.2.3
• brickhost phpscheduleit 1.2.4
• brickhost phpscheduleit 1.2.5
• brickhost phpscheduleit 1.2.6
• brickhost phpscheduleit 1.2.7
• brickhost phpscheduleit 1.2.9
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/31147 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=614202 sourceforge.net
- http://www.securityfocus.com/bid/30300 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43900 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/31147 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=614202 sourceforge.net
- http://www.securityfocus.com/bid/30300 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43900 exchange.xforce.ibmcloud.com