CVE-2008-4244
Rianxosencabos CMS 0.9 - Unauthenticated Authentication Bypass via Cookie Manipulation
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-4244. PoCs published by ka0x, Stack.
AI-analyzed exploit summary This exploit targets Rianxosencabos CMS 0.9 by creating a new user account and then elevating it to admin privileges via a vulnerable parameter. It uses HTTP POST requests to manipulate user roles without authentication.
Description
Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the usuario and pass cookies to 1.
Exploits (2)
This exploit targets Rianxosencabos CMS 0.9 by creating a new user account and then elevating it to admin privileges via a vulnerable parameter. It uses HTTP POST requests to manipulate user roles without authentication.
This exploit demonstrates insecure cookie handling in Rianxosencabos CMS 0.9 by setting arbitrary cookie values via JavaScript, allowing authentication bypass. The PoC is a simple one-liner that manipulates the 'usuario' and 'pass' cookies to gain unauthorized access.