CVE-2008-4600

HIGH CVSS: 7.5 Published: 2008-10-18 Modified: 2026-06-16

Description

configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie.

Affected Platforms

Steve Dawson Pokermax Poker League Tournament Script

Weakness Type

CWE-264

References

http://secunia.com/advisories/32312
http://securityreason.com/securityalert/4431
http://www.securityfocus.com/bid/31784
https://exchange.xforce.ibmcloud.com/vulnerabilities/45931
https://www.exploit-db.com/exploits/6766
http://secunia.com/advisories/32312