Vulnerability Details CVE-2008-3557
Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by setting both the adminuser and loggedin cookies.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.024
EPSS Ranking 84.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/31383
- http://securityreason.com/securityalert/4118
- http://www.securityfocus.com/bid/30580
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44260
- https://www.exploit-db.com/exploits/6213
- http://secunia.com/advisories/31383
- http://securityreason.com/securityalert/4118
- http://www.securityfocus.com/bid/30580
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44260
- https://www.exploit-db.com/exploits/6213
Products affected by CVE-2008-3557
-
cpe:2.3:a:fhm-script:free_hosting_manager:1.2
-
cpe:2.3:a:fhm-script:free_hosting_manager:2.0