Unscored severity · published Aug 4, 2008
CVE-2008-3454
JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cookie value to 1
–
CVSS
2.5%
EPSS
No
On KEV
Description
JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cookie value to 1.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Php Hosting Directory · Jnshosts
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3454
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3454
Vendor Advisory
http://secunia.com/advisories/31235
securityreason.com
http://securityreason.com/securityalert/4105
Exploit
http://www.securityfocus.com/bid/30444
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44110
www.exploit-db.com
https://www.exploit-db.com/exploits/6163
More from Php Hosting Directory
–
CVE-2008-3455
PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd…