CVE-2006-1700

Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-04-11

Last modified

2024-08-07

Affected products

• Scripts Seller (Aweb)

References

• http://secunia.com/advisories/19626
• http://securitytracker.com/id?1015878
• http://www.securityfocus.com/bid/17417