AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-1097

MEDIUM · CVSS 6.8 EPSS 1.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-03-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2010-1097
Severity
MEDIUM
CVSS
6.8
EPSS
1.39%

Original NVD Description

include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.auto_start is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of 1 for the _SESSION[dede_admin_id] parameter, as demonstrated by a request to uploads/include/dialog/select_soft_post.php.