Security Advisory

CVE-2008-7156

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-09-02 17:00:00

Last updated 2024-08-07 11:56:14

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php.

← Browse all CVEs View on cve.org ↗