Authentication Bypass in PHP Jabbers Post Comment by PHP Jabbers
CVE-2008-4721

Currently unrated

Key Information:

Vendor

PHP Jabbers

Status
Post Comment
Vendor
CVE Published:
23 October 2008

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2008-4721?

The Post Comment 3.0 application by PHP Jabbers is susceptible to an authentication bypass vulnerability that enables remote attackers to gain unauthorized administrative access. This occurs when an attacker sets the 'PostCommentsAdmin' cookie to 'logged', effectively circumventing the authentication mechanisms in place. Exploiting this vulnerability allows attackers to manipulate and manage comments without legitimate credentials, posing significant risks to the integrity of user-generated content.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-4721 - Proof of Concept

References

http://secunia.com/advisories/27991
third-party-advisoryx_refsource_SECUNIA
https://www.exploit-db.com/exploits/6625
exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/45503
vdb-entryx_refsource_XF

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.