Vulnerabilities > CVE-2002-1462 - Authentication Bypassing vulnerability in OrganicPHP PHP-Affiliate Details.PHP Hidden Field

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
organicphp

Summary

details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields.

Vulnerable Configurations

Part Description Count
Application
Organicphp
2