CVE-2008-6269

CVE-2008-6269 describes an authentication bypass vulnerability in Joovili 3.1.4, allowing remote attackers to gain unauthorized privileges, including administrator access. This critical flaw stems from insecure cookie handling, where attackers can manipulate session_id, session_logged_in, and session_username cookies (or their admin/staff equivalents) to impersonate other users. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network with low complexity and no authentication, potentially leading to full compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog and with no known active exploitation, exploit code is publicly available on ExploitDB, though there is minimal community discussion or media coverage surrounding this older vulnerability.