CVE-2006-0604 check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access.
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hinton design phphg guestbook | = 1.2 | No fix listed |
References
- evuln.com
- 18758 third-party-advisory vendor-advisory
- 1015620 vdb-entry
- 20060211 [eVuln] phphg Guestbook Multiple Vulnerabilities mailing-list
- 16541 vdb-entry
- ADV-2006-0480 vdb-entry