Vulnerability Details CVE-2006-0654
check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 75.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://evuln.com/vulns/59/summary.html
- http://secunia.com/advisories/18782
- http://www.securityfocus.com/archive/1/424741/100/0/threaded
- http://www.securityfocus.com/bid/16562
- http://evuln.com/vulns/59/summary.html
- http://secunia.com/advisories/18782
- http://www.securityfocus.com/archive/1/424741/100/0/threaded
- http://www.securityfocus.com/bid/16562
Products affected by CVE-2006-0654
-
cpe:2.3:a:hinton_design:phpht_topsites:1.3