CVE-2006-0604

check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-02-08

Last modified

2024-08-07

Affected products

• Phphg Guestbook (Hinton Design)

References

• http://evuln.com/vulns/58/description.html
• http://secunia.com/advisories/18758
• http://securitytracker.com/id?1015620
• http://www.securityfocus.com/archive/1/424740/100/0/threaded
• http://www.securityfocus.com/bid/16541
• http://www.vupen.com/english/advisories/2006/0480