CVE-2008-4600: Steve Dawson Pokermax Poker League Tournament Script

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie.

Affected products

• Steve Dawson Pokermax Poker League Tournament Script: version 0.13 only

Published 2008-10-18. Last modified 2026-06-16.