Back to Database
Status published
High
CVE-2008-6804
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication...
Vulnerability Description
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. NOTE: a third party reports that the vendor disputes the existence of this issue
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6804
Credits & Attribution
No credits recorded in the NVD database.
References
More from tribiq
View All →CVE-2012-5312
SQL injection vulnerability in Tribiq CMS allows remote attackers to...
High
7.5
CVE-2011-2727
The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in...
Medium
4.3
CVE-2009-2220
Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals...
Medium
5.1
CVE-2008-5961
Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community...
Medium
4.3
CVE-2008-5960
SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B...
High
7.5
Affected Vendor
tribiq
View all reports →Affected Software
tribiq cms
Vulnerable Versions:
5.0.9a
Timeline
Official Publish:
May 11th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.