CVE-2008-5840

Published: Jan 5, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1.

Affected (17)

Products: Phpicalendar: Phpicalendar, Phpicalendar2.0

2 products

Phpicalendar2.0

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Phpicalendar Phpicalendar	Up to 2.24
Phpicalendar Phpicalendar	Version 0.7
Phpicalendar Phpicalendar	Version 0.8
Phpicalendar Phpicalendar	Version 0.9.5
Phpicalendar Phpicalendar	Version 0.9
Phpicalendar Phpicalendar	Version 1.0
Phpicalendar Phpicalendar	Version 1.1
Phpicalendar Phpicalendar	Version 2.0.1
Phpicalendar Phpicalendar	Version 2.0 beta
Phpicalendar Phpicalendar	Version 2.0c
Phpicalendar Phpicalendar	Version 2.1
Phpicalendar Phpicalendar	Version 2.21
Phpicalendar Phpicalendar	Version 2.22
Phpicalendar Phpicalendar	Version 2.23
Phpicalendar Phpicalendar	Version 2.23 rc1
Phpicalendar Phpicalendar	Version 2.2
Phpicalendar Phpicalendar2.0	Version alpha_test

Related CWEs

References (8)

http://securityreason.com/securityalert/4865

Source: cve@mitre.org

http://www.securityfocus.com/bid/31320

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/45338

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6526

Source: cve@mitre.org

http://securityreason.com/securityalert/4865

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31320

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/45338

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/6526

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.