CVE-2008-2294 - Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user name for "admin."

Back Back to CVE browser

HIGH

Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user name for "admin."

Published May 18, 2008

7.5

HIGH

CVSS 2.0

EPSS 2.69%

Description

Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user name for "admin."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (5)

http://secunia.com/advisories/30254
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/29252
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-2291
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42466
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5627
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/30254		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/29252		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-2291		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42466		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5627		exploitx_refsource_EXPLOIT-DB