CVE-2008-6723

TurnkeyForms Entertainment Portal 2.0 - Unauthenticated Authentication Bypass via adminLogged Cookie

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-6723. PoCs published by G4N0K.

AI-analyzed exploit summary This exploit demonstrates an insecure cookie handling vulnerability in Entertainment Portal v2.0, allowing an attacker to bypass authentication by setting an admin cookie via JavaScript.

Description

TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to Administrator.

Exploits (1)

exploitdb WORKING POC VERIFIED
by G4N0K · textwebappsphp
https://www.exploit-db.com/exploits/7028

This exploit demonstrates an insecure cookie handling vulnerability in Entertainment Portal v2.0, allowing an attacker to bypass authentication by setting an admin cookie via JavaScript.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Entertainment Portal v2.0
No auth needed
Prerequisites: Access to the admin panel URL · Ability to execute JavaScript in the victim's browser
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46422
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32535
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/32174
Exploit vdb-entry x_refsource_osvdb
http://osvdb.org/49749
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/7028

Scores

EPSS 0.0259
EPSS Percentile 83.2%

Details

CWE
CWE-287
Status published
Products (1)
turnkeyforms/entertainment_portal 2.0
Published Apr 14, 2009
Tracked Since Feb 18, 2026