Vulnerability Details CVE-2008-6855
Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/32472
- http://www.securityfocus.com/bid/32027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46302
- https://www.exploit-db.com/exploits/6901
- http://secunia.com/advisories/32472
- http://www.securityfocus.com/bid/32027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46302
- https://www.exploit-db.com/exploits/6901
Products affected by CVE-2008-6855
-
cpe:2.3:a:xigla:absolute_news_feed:1.0
-
cpe:2.3:a:xigla:absolute_news_feed:1.5