CVE-2006-0607

This CVE affects phphd 1.0 by Hinton Design. The vulnerability is in check.php where passwords are not validated when certain cookies are present, enabling remote authentication bypass. This is cookie-based authentication bypass (noted as a vulnerability in EV0060) that allows an attacker to bypa...

CVE-2006-0608

CVE-2006-0608 affects Hinton Design phphd 1.0. The vulnerability set includes SQL injection in the authentication flow, notably via the username parameter to check.php, and other scripts that display data from the database. The eVuln/disclosure documents indicate multiple vulnerabilities (SQL inj...

CVE-2006-0609

CVE-2006-0609 : The vulnerability affects Hinton Design’s phphd 1.0, specifically the add.php script, where a Cross‑Site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Multiple independent sources (NVD entry, eVuln/SEC references, and Pack...