Lucene search

[email protected]CVE-2006-0654

HistoryFeb 13, 2006 - 11:06 a.m.

CVE-2006-0654

2006-02-1311:06:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0654

validation

vulnerability

hinton design

phpht topsites 1.3

authentication

remote attackers

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.4%

JSON

check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies.

CPENameOperatorVersion
hinton_design:phpht_topsiteshinton design phpht topsiteseq1.3

CPE	Name	Operator	Version
hinton_design:phpht_topsites	hinton design phpht topsites	eq	1.3

References

evuln.com/vulns/59/summary.html

secunia.com/advisories/18782

www.securityfocus.com/archive/1/424741/100/0/threaded

www.securityfocus.com/bid/16562

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.4%

JSON

Related for CVE-2006-0654

prion1