CVE-2008-6804
** DISPUTED ** Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain...
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. NOTE: a third party reports that the vendor disputes the existence of this issue
Exploit likelihood
What each source reports
NVD Score used
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. NOTE: a third party reports that the vendor disputes the existence of this issue
- Record
CVE-2008-6804- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. NOTE: a third party reports that the vendor disputes the existence of this issue
- Record
CVE-2008-6804- Updated
- 2026-11-02
EUVDEUVD-2008-6764 No score
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. NOTE: a third party reports that the vendor disputes the existence of this issue
- Record
EUVD-2008-6764- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwhw-v77g-vr64 No score
** DISPUTED ** Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain...
** DISPUTED ** Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. NOTE: a third party reports that the vendor disputes the existence of this issue.
- Record
GHSA-wwhw-v77g-vr64- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Tribiq CMS 5.0.9a (Beta) - Insecure Cookie Handling | 2008-10-31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6804 is a high vulnerability (CVSS 7.5) in Tribiq Cms, published May 11, 2009. Its validity is disputed. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile.