CVE-2008-3211

Description

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.

Affected Platforms

Weakness Type

CWE-287

References

• http://secunia.com/advisories/31083
• http://securityreason.com/securityalert/4014
• http://www.securityfocus.com/bid/30217
• http://www.vupen.com/english/advisories/2008/2106/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43771
• https://www.exploit-db.com/exploits/6070