PT-2006-1661 · Hinton Design · Hinton Design Phphg Guestbook

Aliaksandr Hartsuyeu · Published 2006-02-08 · Updated 2018-10-19 · CVE-2006-0604

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hinton Design phphg Guestbook version 1.2

Description The issue concerns the authentication mechanism in the guestbook application. Specifically, the check.php file does not properly verify the user password when authentication is performed via cookies. This oversight allows remote attackers to gain unauthorized access to the system.

Recommendations For Hinton Design phphg Guestbook version 1.2, as a temporary workaround, consider disabling cookie-based authentication until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0604

Affected Products

Hinton Design Phphg Guestbook

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-0604 · Security Note
• http://secunia.com/advisories/18758 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0480 · Note
• http://securitytracker.com/id?1015620 · Note
• http://evuln.com/vulns/58/description.html · Note
• http://securityfocus.com/archive/1/424740/100/0/threaded · Note
• http://securityfocus.com/bid/16541 · Note