CVE-2008-5125
CCleague Pro 1.2 - Unauthenticated Authentication Bypass via Type Cookie
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-5125. PoCs published by t0pP8uZz.
AI-analyzed exploit summary This exploit demonstrates an insecure cookie authentication vulnerability in CCLeague Pro <= 1.2. By manipulating cookies via JavaScript, an attacker can bypass authentication and gain admin access. The exploit also highlights a secondary SQL injection vulnerability if magic quotes are disabled.
Description
admin.php in CCleague Pro 1.2 allows remote attackers to bypass authentication by setting the type cookie value to admin.
Exploits (1)
This exploit demonstrates an insecure cookie authentication vulnerability in CCLeague Pro <= 1.2. By manipulating cookies via JavaScript, an attacker can bypass authentication and gain admin access. The exploit also highlights a secondary SQL injection vulnerability if magic quotes are disabled.