CVEvulnerability
CVE-2008-7024
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to "admin" and setting the name parameter to "users."
Affected configurations
• arzdev gemini lite 3.5
• arzdev gemini lite 3.6
• arzdev gemini portal 4.7
Related
Weakness · not in database (1)
References
- http://osvdb.org/48639 osvdb.org
- http://secunia.com/advisories/32057 Vendor Advisory
- http://www.securityfocus.com/archive/1/496761/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31429 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45439 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6584 www.exploit-db.com
- http://osvdb.org/48639 osvdb.org
- http://secunia.com/advisories/32057 Vendor Advisory
- http://www.securityfocus.com/archive/1/496761/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31429 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45439 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6584 www.exploit-db.com