Vulnerabilities > CVE-2006-0844 - Unspecified vulnerability in Leif M. Wright web Blog 3.5

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
leif-m-wright
NVD
Published: 2006-02-22
Updated: 2024-11-21

Summary

Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting the blogAdmin cookie.

Vulnerable Configurations

Part Description Count
Application
Leif_M._Wright
1

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/44315/EV0082.txt
idPACKETSTORM:44315
last seen2016-12-05
published2006-03-03
reporterAliaksandr Hartsuyeu
sourcehttps://packetstormsecurity.com/files/44315/EV0082.txt.html
titleEV0082.txt

References