Lucene search
HistoryMar 19, 2006 - 11:06 a.m.
CVE-2006-1276
cve-2006-1276
php
simplenews
authentication bypass
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.038 Low
EPSS
Percentile
91.9%
admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie.
Affected configurations
Node
himpfen_consultingphp_simplenewsRange≤1.0.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| himpfen_consulting:php_simplenews | himpfen consulting php simplenews | le | 1.0.0 |
Related
nvd
nvd
CVE-2006-1276
2006-03-19 11:06:00
cvelist
cvelist
CVE-2006-1276
2006-03-19 11:00:00
prion
prion
Authentication flaw
2006-03-19 11:06:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.038 Low
EPSS
Percentile
91.9%
Related for CVE-2006-1276