CVE-2008-3211

Published: Jul 18, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.

Affected (2)

Products: Scripteen: Free Image Hosting Script

Scripteen

1 product

Free Image Hosting Script

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Scripteen Free Image Hosting Script	Version 1.2.1
Scripteen Free Image Hosting Script	Version 1.2

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (12)

http://secunia.com/advisories/31083

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4014

Source: cve@mitre.org

http://www.securityfocus.com/bid/30217

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2106/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43771

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6070

Source: cve@mitre.org

http://secunia.com/advisories/31083