Unscored severity · published May 18, 2008
CVE-2008-2298
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1
–
CVSS
2.8%
EPSS
No
On KEV
Description
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
Web Slider · Sourceforge
0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2298
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2298
www.securityfocus.com
http://www.securityfocus.com/bid/29246
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42468
www.exploit-db.com
https://www.exploit-db.com/exploits/5629