CVE-2008-5497: Bandsitecms Bandsite CMS

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_auth cookie to true.

Affected products

• Bandsitecms Bandsite CMS: version 1.1.4 only

Published 2008-12-12. Last modified 2026-06-16.