Authentication flaw

2010-03-0518:30:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the room_phplanning cookie to a value associated with the admin account.

CPENameOperatorVersion
roomphplanningeq1.6

CPE	Name	Operator	Version
	roomphplanning	eq	1.6

References

secunia.com/advisories/35237

www.exploit-db.com/exploits/8797