CVE-2008-3033
published 2008-07-07CVE-2008-3033: RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to access admin functions…
PriorityP353critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
3.01%
85.8th percentile
RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to access admin functions and have unspecified other impact, as demonstrated by (1) an IdFlux request to supprimer_flux.php and (2) a TpsRafraich request to modifier_tps_rafraich.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| rss_aggregator | rss_aggregator | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://securityreason.com/securityalert/3975http://www.securityfocus.com/archive/1/493783/100/0/threadedhttp://www.securityfocus.com/bid/30016https://exchange.xforce.ibmcloud.com/vulnerabilities/43509http://securityreason.com/securityalert/3975http://www.securityfocus.com/archive/1/493783/100/0/threadedhttp://www.securityfocus.com/bid/30016https://exchange.xforce.ibmcloud.com/vulnerabilities/43509
2008-07-07
Published