CVE-2008-3317

admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary search_cookie cookie.

Link	Resource
http://www.maianscriptworld.co.uk/free-php-scripts/maian-search/development/index.html	Patch
http://www.maianscriptworld.co.uk/news.html
http://www.securityfocus.com/bid/30211	Exploit
http://secunia.com/advisories/31075	Vendor Advisory
http://securityreason.com/securityalert/4042
https://exchange.xforce.ibmcloud.com/vulnerabilities/43753
https://www.exploit-db.com/exploits/6066

Configuration 1

cpe:2.3:a:maian_script_world:maian_search:*:*:*:*:*:*:*:* cpe:2.3:a:maian_script_world:maian_search:1.0:*:*:*:*:*:*:*

---

Published : 2008-07-25 04:41

Updated : 2017-09-29 01:31

---

NVD link : CVE-2008-3317

Mitre link : CVE-2008-3317

No products.

CWE-287