PT-2005-2507 · Pwsphp · Pwsphp

Froggz · Published 2005-05-11 · Updated 2017-07-11 · CVE-2005-1511

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PwsPHP version 1.2.2

Description The issue allows remote attackers to bypass authentication and post arbitrary comments via the Pseudo cookie.

Recommendations For PwsPHP version 1.2.2, consider disabling the use of the Pseudo cookie until a patch is available to prevent authentication bypass and arbitrary comment posting.

Fix

Related Identifiers

CVE-2005-1511

Affected Products

Pwsphp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-1511 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20503 · Note
• http://marc.info/?l=bugtraq&m=111565808024581&w=2 · Note
• http://osvdb.org/16235 · Note
• http://secunia.com/advisories/15315 · Note