Authentication flaw

2009-05-2019:30:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.043 Low

EPSS

Percentile

92.4%

JSON

PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including administrative privileges, by setting the authuser cookie parameter to a valid username.

CPENameOperatorVersion
pad_site_scriptseq3.6

CPE	Name	Operator	Version
	pad_site_scripts	eq	3.6

References

osvdb.org/54593

secunia.com/advisories/35155

www.securityfocus.com/bid/35027

exchange.xforce.ibmcloud.com/vulnerabilities/50622

www.exploit-db.com/exploits/8735