← Database

CVE-2008-7179

HIGH CVSS: 7.5 Published: 2009-09-08 Modified: 2026-06-16

Description

OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMIN_Nome cookies to certain values, as reachable in Admin/index.php.

Affected Platforms

Otmanager Otmanager Cms

Weakness Type

CWE-287

References