CVE-2013-7137

9.8 criticalEPSS 16%

Critical (9.8) in burden project burden. EPSS 16% chance of exploitation in the next 30 days.

The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2014-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

burden_project:burden

References

http://www.exploit-db.com/exploits/30916
http://www.securityfocus.com/archive/1/530703/100/0/threaded
https://github.com/joshf/Burden/commit/edaa1bb8f73d6f3c8b2e78b67f1b40e02fccd0c1
https://github.com/joshf/Burden/issues/2
https://github.com/joshf/Burden/releases/tag/1.8.1

Check your stack JSON