Burden
1 CVEs
product
Monthly
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
PHP
Authentication Bypass
Burden
NVD
Exploit-DB
GitHub
CVSS 3.1
9.8
EPSS
9.8%
EPSS 10%
CVSS 9.8
CRITICAL
POC
PATCH
Act Now
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
PHP
Authentication Bypass
Burden
NVD
Exploit-DB
GitHub