PT-2006-1661 · Hinton Design · Hinton Design Phphg Guestbook

Aliaksandr Hartsuyeu · Publicado 2006-02-08 · Atualizado 2018-10-19 · CVE-2006-0604

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hinton Design phphg Guestbook version 1.2

Description The issue concerns the authentication mechanism in the guestbook application. Specifically, the check.php file does not properly verify the user password when authentication is performed via cookies. This oversight allows remote attackers to gain unauthorized access to the system.

Recommendations For Hinton Design phphg Guestbook version 1.2, as a temporary workaround, consider disabling cookie-based authentication until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0604

Produtos afetados

Hinton Design Phphg Guestbook

Referências · 7

• http://vupen.com/english/advisories/2006/0480 · Nota
• http://securitytracker.com/id?1015620 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0604 · Nota de Segurança
• http://evuln.com/vulns/58/description.html · Nota
• http://securityfocus.com/archive/1/424740/100/0/threaded · Nota
• http://secunia.com/advisories/18758 · Aviso do Fabricante
• http://securityfocus.com/bid/16541 · Nota