Lucene search
K

phpLiterAdmin 1.0 RC1 Authentication Bypass

🗓️ 28 Oct 2010 00:00:00Reported by High-Tech Bridge SAType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 17 Views

phpLiterAdmin 1.0 RC1 authentication bypass vulnerability

Code
`Vulnerability ID: HTB22653  
Reference: http://www.htbridge.ch/advisory/authentication_bypass_in_phpliteradmin.html  
Product: phpLiterAdmin   
Vendor: phpLiterAdmin ( http://code.google.com/p/phpliteradmin/ )   
Vulnerable Version: 1.0 RC1 and probably prior versions   
Vendor Notification: 13 October 2010   
Vulnerability Type: Authentication bypass  
Status: Fixed by Vendor  
Risk level: High   
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/)   
  
Vulnerability Details:  
phpLiterAdmin is affected by an authentication bypass vulnerability.  
This issue is due to the application failing to properly sanitize user-supplied input during authentication.  
Exploitation of this vulnerability would permit unauthorized access to any known account.  
  
Authentication can be bypassed by setting the special crafted cookies:  
  
  
phpLiterAdmin432=a:2:{s:8:"username"%3bs:5:"admin"%3bs:8:"password"%3bb:1%3b};  
  
Solution: Upgrade to the most recent version  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Oct 2010 00:00Current
0.4Low risk
Vulners AI Score0.4
17