CVE-2008-7024

N/A Unknown

Published: August 21, 2009 Modified: April 23, 2026

Description

admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to "admin" and setting the name parameter to "users."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://osvdb.org/48639

Source: cve@mitre.org

http://secunia.com/advisories/32057

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/496761/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/31429

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/45439

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6584

Source: cve@mitre.org

http://osvdb.org/48639