Unscored severity · published May 19, 2008
CVE-2008-2338
Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin
–
CVSS
6.4%
EPSS
No
On KEV
Description
Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Activekb · Interspire
through 1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2338
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2338
Vendor Advisory
http://secunia.com/advisories/30265
www.securityfocus.com
http://www.securityfocus.com/bid/29226
www.securitytracker.com
http://www.securitytracker.com/id?1020035
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42427
www.exploit-db.com
https://www.exploit-db.com/exploits/5616
More from Activekb
–
CVE-2009-4957
Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly have unspecified other impact via directory…
–
CVE-2007-5425
SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion…