CVE-2008-6743

no score yetEPSS 2.6%

shock-therapy rsmscript: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days.

RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verified cookie to an arbitrary value and performing a direct request to (1) delete.php, (2) edit-submit.php, (3) edit.php, (4) submit.php, and (5) update.php, which bypasses the security check that is performed by verify.php.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2009-04-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

shock-therapy:rsmscript

References

http://osvdb.org/50802
http://secunia.com/advisories/33150
http://www.securityfocus.com/bid/32886
https://exchange.xforce.ibmcloud.com/vulnerabilities/47451
https://www.exploit-db.com/exploits/7497

Check your stack JSON