CVE-2008-3033

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.01%

Published

Jul 7, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBRSS-aggregator 1.0 - Authentication Bypass TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to access admin functions and have unspecified other impact, as demonstrated by (1) an IdFlux request to supprimer_flux.php and (2) a TpsRafraich request to modifier_tps_rafraich.php.

Weaknesses (CWE)

CWE-287

Affected Products (1)

rss_aggregator · rss_aggregatorvulnerable

References (8)

http://securityreason.com/securityalert/3975

http://www.securityfocus.com/archive/1/493783/100/0/threaded

http://www.securityfocus.com/bid/30016

https://exchange.xforce.ibmcloud.com/vulnerabilities/43509

http://securityreason.com/securityalert/3975

http://www.securityfocus.com/archive/1/493783/100/0/threaded

http://www.securityfocus.com/bid/30016

https://exchange.xforce.ibmcloud.com/vulnerabilities/43509

KEV Catalog EPSS Scores Vendors All CVEs