PT-2006-1664 · Hinton Design · Phphd

Aliaksandr Hartsuyeu · Published 2006-02-08 · Updated 2018-10-19 · CVE-2006-0607

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hinton Design phphd version 1.0

Description The issue allows remote attackers to bypass authentication due to a lack of password checking when certain cookies are provided. This occurs in the check.php file.

Recommendations For Hinton Design phphd version 1.0, consider disabling the check.php file or restricting access to it until a patch is available to prevent authentication bypass. Additionally, review and modify the authentication mechanism to properly check passwords even when specific cookies are present.

Exploit

Fix

Related Identifiers

CVE-2006-0607

Affected Products

Phphd

References · 7

• 🔥 http://evuln.com/vulns/60/summary.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0607 · Security Note
• http://securityfocus.com/archive/1/424827/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24510 · Note
• http://securityfocus.com/bid/16586 · Note
• http://secunia.com/advisories/18793 · Note
• http://osvdb.org/23026 · Note