CVE-2008-5784

highpriority · attend · 51EPSS 0.071 · 94 %ileexploit · functionalEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · functional

Likely / severe?

7.10% (94th) EPSS

CVSS 7.5 · high

Is it mine?

2 products

Check your exposure

Who says so?

2 sources

enisa_euvd · nvd

EPSS · scored 2026-10-27

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.3criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-565USprimary

exploits (2)

Public proof-of-concept and weaponised exploit code.

EDB-7063V3 Chat Profiles/Dating Script 3.0.2 - Insecure Cookie Handlingfunctional · exploit_db
EDB-7069V3 Chat Live Support 3.0.4 - Insecure Cookie Handlingfunctional · exploit_db

affected products (2)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
v3chat v3 chat profiles dating script= 3.0.2nvdUScpe:2.3:a:v3chat:v3_chat_profiles_dating_script:*:*:*:*:*:*:*:*

also known as (2)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd nvd NVD CVE.org MITRE

published 2008-12-31modified 2026-06-16

related (88)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-0257US	critical9.1OT critical	95.0% (100th)	KEV	2026-05-13
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establi…
CVE-2023-35885US	critical9.8	73.5% (99th)	Exploit	2023-06-20
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
CVE-2026-39324US	critical9.8OT high	0.27% (19th)	Exploit	2026-04-07
Rack::Session is a session management implementation for Rack. From 2.0.0 to before 2.1.2, Rack::Session::Cookie incorrectly handles decryption failures when configured with secret…
CVE-2017-6896US	high8.8	3.70% (90th)	Exploit	2017-03-14
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Bas…
CVE-2019-7266US	critical9.8	4.63% (92nd)	—	2019-07-02
Linear eMerge 50P/5000P devices allow Authentication Bypass.

+83 more

references (10)

External citations — patches, advisories, analysis.

http://secunia.com/advisories/32603 enisa_euvd
http://www.securityfocus.com/bid/32216 enisa_euvd
http://www.vupen.com/english/advisories/2008/3071 enisa_euvd
https://exchange.xforce.ibmcloud.com/vulnerabilities/46479 enisa_euvd
https://www.exploit-db.com/exploits/7063 enisa_euvd
http://secunia.com/advisories/32603Broken LinkVendor Advisorynvd
http://www.securityfocus.com/bid/32216Broken LinkExploitThird Party AdvisoryVDB Entrynvd
http://www.vupen.com/english/advisories/2008/3071Broken Linknvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan