CVE-2008-7024
Public Exploits 1
ExploitDB · 1 EDB-6584 [webapps]
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-7024
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to "admin" and setting the name parameter to "users."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Arz Development The Gemini Portal Cookie 'admin.php'身份认证绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Arz Development The Gemini Portal 4.7以及之前的版本中的admin.php允许远程攻击者通过把用户cookie设置成admin以及设置到用户的名字参数，来绕过身份认证和获得管理员特权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-7024
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-7024
请登录查看更多情报信息。
Vendor Advisories for CVE-2008-7024 (5)
Exploits & Public PoCs for CVE-2008-7024 (1)
Same Patch Batch · n/a · 2009-08-21 · 38 CVEs total
| CVE-2009-2917 | imtoo mpeg_encoder 缓冲区溢出漏洞 | |
| CVE-2008-7021 | AvailScript Job Portal Script 'editlogo.php' 远程文件上传漏洞 | |
| CVE-2008-7022 | Chilkat Software IMAP 'ChilkatMail_v7_9.dll' 不安全方法漏洞 | |
| CVE-2008-7023 | Aruba Mobility Controller Shared X.509 Certificate 安全绕过漏洞 | |
| CVE-2008-7025 | Checkpoint ZoneAlarm HTTP Proxy远程拒绝服务漏洞 | |
| CVE-2008-7026 | efrontlearning efront 'filesystem3.class.php' 权限许可和访问控制漏洞 | |
| CVE-2008-7027 | Libra File Manager Cookie 身份认证绕过漏洞 | |
| CVE-2008-7028 | Aves RPG.Board认证绕过权限提升漏洞 | |
| CVE-2009-2915 | 2fly gift_delivery_system '2fly_gift.php' SQL注入漏洞 | |
| CVE-2009-2916 | 2kgames vietcong2 格式化字符串漏洞 | |
| CVE-2008-7020 | mcafee safeboot_device_encryption 加密问题漏洞 | |
| CVE-2009-2918 | TheGreenBow VPN客户端tgbvpn.sys驱动本地拒绝服务漏洞 | |
| CVE-2009-2919 | BoonEx Orca Topic Title HTML注入漏洞 | |
| CVE-2009-2920 | elvinbts 跨站脚本攻击漏洞 | |
| CVE-2009-2921 | MOC Designs PHP News 'login.php' SQL注入漏洞 | |
| CVE-2009-2922 | Pixaria Gallery 'pixaria.image.php' 目录遍历漏洞 | |
| CVE-2009-2923 | BitmixSoft PHP-Lance 路径游历漏洞 | |
| CVE-2009-2924 | videosbroadcastyourself Videos Broadcast Yourself SQL注入漏洞 | |
| CVE-2009-2925 | djcalendar 'DJcalendar.cgi' 路径游历漏洞 | |
| CVE-2009-1154 | Cisco IOS XR超长BGP更新拒绝服务漏洞 |
Showing top 20 of 38 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2024-14046
OpenBoxes Document Upload Controller DocumentController.groo - CVE-2024-14045
OpenBoxes Product Supplier Edit Controller RoleInterceptor.g - CVE-2026-19986
Adblock for Youtube Extension Event Listener contentscript.j - CVE-2026-19965
automad Password Reset Endpoint UserController.php requestPa - CVE-2026-51346
StudIP 6.0.3前/5.4.12前SQL注入漏洞
V. Comments for CVE-2008-7024
No comments yet