Every CVE Search/ Get API key

CVE-2008-3211

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass...

7.5 HighPublic exploit

CVE-2008-3211 is a high vulnerability (CVSS 7.5) in Scripteen Free Image Hosting Script, published July 18, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.26%, the 88th percentile. No source names a fixed version.

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.

Exploit likelihood

3.26%Up 1.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.

Record
CVE-2008-3211
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-287
Updated
2026-11-02
CVE List No score

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.

Record
CVE-2008-3211
Updated
2026-11-02
EUVDEUVD-2008-3201 No score

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.

Record
EUVD-2008-3201
Updated
2026-11-03
GitHub AdvisoriesGHSA-qjq6-qxx8-cgh5 No score

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass...

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.

Record
GHSA-qjq6-qxx8-cgh5
Weakness
CWE-287
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBScripteen Free Image Hosting Script 1.2 - 'cookie' Pass Grabber2008-07-13

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD

References

MoveEnter Open