Vulnerabilities > CVE-2006-0607 - Input Validation And Authentication Bypass vulnerability in Hinton Design PHPhd 1.0

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

hinton-design

NVD

Published: 2006-02-08

Updated: 2018-10-19

Summary

check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote attackers to bypass authentication.

Vulnerable Configurations

Part	Description	Count
Application	Hinton_Design Hinton Design Phphd 1.0	1

Packetstorm

data source	https://packetstormsecurity.com/files/download/43801/EV0060.txt
id	PACKETSTORM:43801
last seen	2016-12-05
published	2006-02-14
reporter	Aliaksandr Hartsuyeu
source	https://packetstormsecurity.com/files/43801/EV0060.txt.html
title	EV0060.txt

References

http://secunia.com/advisories/18793
http://www.evuln.com/vulns/60/summary.html
http://www.osvdb.org/23026
http://www.securityfocus.com/archive/1/424827/100/0/threaded
http://www.securityfocus.com/bid/16586
https://exchange.xforce.ibmcloud.com/vulnerabilities/24510