EV0061.txt

New eVuln Advisory: phpstatus Authentication Bypass http://evuln.com/vulns/61/summary.html --------------------Summary---------------- eVuln ID: EV0061 CVE: CVE-2006-0570 CVE-2006-0571 CVE-2006-0572 Vendor: Hinton Design Vendor's Web Site: http://www.hintondesign.org Software: phpstatus Sowtware'...

CVE-2006-0572

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication...

CVE-2006-0572

CVE-2006-0572 affects phpstatus 1.0, where authentication can be bypassed because cookies are used to identify the user without verifying a password. The vulnerability is tied to the cookies-based authentication flow (vulnerable in check.php), enabling remote attackers to bypass login. Exploit in...