Lucene search
HistoryFeb 08, 2006 - 11:02 p.m.
CVE-2006-0604
cve-2006-0604
hinton design
phphg
guestbook
authentication
unauthorized access
7.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.4%
check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hinton_design:phphg_guestbook | hinton design phphg guestbook | eq | 1.2 |
Related
prion
prion
Design/Logic Flaw
2006-02-08 23:02:00
packetstorm
packetstorm
EV0058.txt
2006-02-13 00:00:00
securityvulns
securityvulns
[eVuln] phphg Guestbook Multiple Vulnerabilities
2006-02-13 00:00:00
7.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.4%
Related for CVE-2006-0604