CVE-2009-3421

published 2009-09-25

CVE-2009-3421: login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access…

Priority P2 63 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
zenas	pao-bacheca_guestbook	—	—

Detection & IOCs extracted from sources · hover to see the quote

url http://127.0.0.1/[path]/login.php?login_ok=1↗

path /login.php↗

• → Detect GET requests to login.php containing the query parameter 'login_ok=1', which indicates an authentication bypass attempt against PaoBacheca Guestbook 2.1. ↗
• → Flag unauthenticated access to the admin area following a request to login.php with login_ok=1 in the query string; exploitation requires register_globals to be enabled on the server. ↗

• · Exploitation is only possible when PHP's register_globals directive is enabled (register_globals = on). Servers with register_globals disabled are not vulnerable. ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 6.8 MEDIUM AV:N/AC:M/Au:N/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-287