CVE-2008-4708: Sylvain Pasquet Bbzl.php

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admin_session cookie to 1.

Affected products

• Sylvain Pasquet Bbzl.php: version 0.92 only

Published 2008-10-23. Last modified 2026-06-16.