Vulnerabilities > CVE-2006-0654 - Input Validation vulnerability in Hinton Design PHPht Topsites 1.3

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
hinton-design

Summary

check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies.

Vulnerable Configurations

Part Description Count
Application
Hinton_Design
1