← Database

CVE-2008-2682

HIGH CVSS: 7.5 Published: 2008-06-12 Modified: 2026-06-16

Description

_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.

Affected Platforms

Realm Project Realm Cms

Weakness Type

CWE-264

References