4362Third-party advisory
http://securityreason.com/securityalert/4362 CVE-2008-4492
Yourownbux 4.0 - 'cookie' Authentication Bypass
Record summary
CVE-2008-4492 has a selected CVSS score of 7.5; EIP currently links 2 catalogued exploits.
Description
SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands via the usNick cookie.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBYourownbux 4.0 - 'cookie' Authentication BypassExploitDB exploitby Tec-n0xNot analyzed1 file
ExploitDBYourownbux 4.0 - 'cookie' SQL InjectionExploitDB exploitby Tec-n0xNot analyzed1 file
References
531624vdb entry
http://www.securityfocus.com/bid/31624 yourownbux-referrals-sql-injection(45737)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/45737 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-4492 6693exploit
https://www.exploit-db.com/exploits/6693