What’s Vulnerable › Vulnerabilities

CVE-2013-7137

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 16.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-01-26 · updated 2026-06-17
• Weakness: CWE-287

Description

The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1.

Affected products

• Burden Project Burden: before 1.8.1 — fixed in 1.8.1

How to fix

Upgrade to a fixed version: Burden Project Burden 1.8.1. Check the vendor advisory for mitigations.

References

• http://www.exploit-db.com/exploits/30916
• http://www.securityfocus.com/archive/1/530703/100/0/threaded
• https://github.com/joshf/Burden/commit/edaa1bb8f73d6f3c8b2e78b67f1b40e02fccd0c1
• https://github.com/joshf/Burden/issues/2
• https://github.com/joshf/Burden/releases/tag/1.8.1
• https://www.htbridge.com/advisory/HTB23192
• http://www.exploit-db.com/exploits/30916
• http://www.securityfocus.com/archive/1/530703/100/0/threaded
• https://github.com/joshf/Burden/commit/edaa1bb8f73d6f3c8b2e78b67f1b40e02fccd0c1
• https://github.com/joshf/Burden/issues/2
• https://github.com/joshf/Burden/releases/tag/1.8.1
• https://www.htbridge.com/advisory/HTB23192

Get alerted when CVE-2013-7137 or the next vulnerability affects your stack