PT-2006-1664 · Hinton Design · Phphd

Aliaksandr Hartsuyeu · Publicado 2006-02-08 · Atualizado 2018-10-19 · CVE-2006-0607

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hinton Design phphd version 1.0

Description The issue allows remote attackers to bypass authentication due to a lack of password checking when certain cookies are provided. This occurs in the check.php file.

Recommendations For Hinton Design phphd version 1.0, consider disabling the check.php file or restricting access to it until a patch is available to prevent authentication bypass. Additionally, review and modify the authentication mechanism to properly check passwords even when specific cookies are present.

Exploit

Correção

Identificadores relacionados

CVE-2006-0607

Produtos afetados

Phphd

Referências · 7

• 🔥 http://evuln.com/vulns/60/summary.html · Exploit
• http://securityfocus.com/archive/1/424827/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0607 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24510 · Nota
• http://securityfocus.com/bid/16586 · Nota
• http://secunia.com/advisories/18793 · Nota
• http://osvdb.org/23026 · Nota