CVE-2008-2682: Realm Project Realm CMS

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.

Affected products

• Realm Project Realm CMS: version 2.3 only

Published 2008-06-12. Last modified 2026-06-16.