CVE-2008-7024

CVE-2008-7024 describes an authentication bypass vulnerability in admin.php of Arz Development The Gemini Portal versions 4.7 and earlier, as well as Arzdev Gemini Lite. Attackers can gain administrator privileges by manipulating cookie values, specifically setting the "user" cookie to "admin" and the "name" parameter to "users." This vulnerability carries a CVSS score of 6.8, indicating moderate severity with network-based attacks requiring medium complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.