Authentication flaw

2008-08-1219:41:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.4%

JSON

admin/wr_admin.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9.1 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1.

CPENameOperatorVersion
php_ring_webring_systemeq0.9.1

CPE	Name	Operator	Version
	php_ring_webring_system	eq	0.9.1

References

securityreason.com/securityalert/4143

www.securityfocus.com/bid/30624

exchange.xforce.ibmcloud.com/vulnerabilities/44379

www.exploit-db.com/exploits/6225