VULNERABILITY INTELLIGENCE

CVE-2008-7024

CVSS score6.8 MEDIUM
EPSS probability2.53%
CISA KEVNot currently listed
Published2009-08-21
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to "admin" and setting the name parameter to "users."

Primary references