Lucene search

[email protected]CVE-2005-2203

HistoryJul 11, 2005 - 4:00 a.m.

CVE-2005-2203

2005-07-1104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-2203

phpwishlist

authentication bypass

admin.php

nvd

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.7%

JSON

login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php.

CPENameOperatorVersion
phpwishlist:phpwishlistphpwishlisteq0.1.11
phpwishlist:phpwishlistphpwishlisteq0.1.14
phpwishlist:phpwishlistphpwishlisteq0.1.12
phpwishlist:phpwishlistphpwishlisteq0.1.13
phpwishlist:phpwishlistphpwishlisteq0.1.9
phpwishlist:phpwishlistphpwishlisteq0.1.10

CPE	Name	Operator	Version
phpwishlist:phpwishlist	phpwishlist	eq	0.1.11
phpwishlist:phpwishlist	phpwishlist	eq	0.1.14
phpwishlist:phpwishlist	phpwishlist	eq	0.1.12
phpwishlist:phpwishlist	phpwishlist	eq	0.1.13
phpwishlist:phpwishlist	phpwishlist	eq	0.1.9
phpwishlist:phpwishlist	phpwishlist	eq	0.1.10

References

securitytracker.com/id?1014432

unix.freshmeat.net/projects/phpwishlist/?branch_id=53897&release_id=200925

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.7%

JSON