CVE-2008-3557: Fhm-Script Free Hosting Manager

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by setting both the adminuser and loggedin cookies.

Affected products

• Fhm-Script Free Hosting Manager: version 1.2 only; version 2.0 only

Published 2008-08-08. Last modified 2026-06-16.