CVE-2002-0491 admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remote attackers to bypass the authentication and gain privilege...
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remote attackers to bypass the authentication and gain privileges by setting the admin cookie to an arbitrary value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alguest | = 1.0 | No fix listed |
References
- alguest-php-admin-access(8623) vdb-entry vendor-advisory
- 20020324 Cookie vulnerability in Alguest guestbook (PHP) mailing-list vendor-advisory
- 4355 exploit vdb-entry vendor-advisory