7.5
CVE-2006-0604
- EPSS 2.6%
- Veröffentlicht 08.02.2006 23:02:00
- Zuletzt bearbeitet 16.06.2026 22:20:55
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Logincheck.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hinton Design ≫ Phphg Guestbook Version1.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.6% | 0.833 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/18758
http://securitytracker.com/id?1015620
http://www.securityfocus.com/archive/1/424740/100/0/threaded
http://www.securityfocus.com/bid/16541
http://www.vupen.com/english/advisories/2006/0480
http://evuln.com/vulns/58/description.html