CVE-2008-2682

HIGH 7.5CVE-2008-2682 · Published 12/06/2008 · updated 16/06/2026

In short

CVE-2008-2682 is a HIGH (CVSS 7.5) vulnerability affecting realm cms (realm project).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 85.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
realm cms realm_project	`= 2.3`	No fix yet

Description

_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.

References

bugreport.ir/index.php · Exploit
secunia.com/advisories/30583 · Vendor Advisory
securityfocus.com/bid/29616
exchange.xforce.ibmcloud.com/vulnerabilities/42960
exploit-db.com/exploits/5766

More vulnerabilities in realm cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free