nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-6539 CVE-2008-6539
Destar 0.2.2-5 - Arbitrary Add Admin
Record summary
CVE-2008-6539 has a selected CVSS score of 6.5; EIP currently links 1 catalogued exploit.
Description
Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBDestar 0.2.2-5 - Arbitrary Add AdminExploitDB exploitby nonrootNot analyzed1 file
References
25305exploit
https://www.exploit-db.com/exploits/5305