AJ Auction Pro Plugin Authentication Bypass Vulnerability in AJ Square
CVE-2008-6966
Currently unrated
Key Information:
- Vendor
Aj Square
- Status
- Vendor
- CVE Published:
- 13 August 2009
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-6966?
The AJ Auction Pro Platinum Skin #1 by AJ Square has a security flaw that allows remote attackers to perform an authentication bypass. This occurs when the plugin processes a direct request to the admin/user.php file; although it sends a redirect, it fails to terminate the request, enabling unauthorized access to admin functionalities. This vulnerability can be exploited by an attacker to gain administrative privileges without proper authentication.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.