CVE-2009-0108

no score yetEPSS 2.6%

PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via modified (1) PHPAUCTION_RM_ID, (2) PHPAUCTION_RM_NAME, (3) PHPAUCTION_RM_USERNAME, and (4) PHPAUCTION_RM_EMAIL cookies.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-01-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

phpauctions:phpauctions

References

http://osvdb.org/51146
http://secunia.com/advisories/33331
http://securityreason.com/securityalert/4891
http://www.securityfocus.com/bid/33120
https://www.exploit-db.com/exploits/7674

Check your stack JSON