5.1

CVE-2006-3772

Exploit
PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions and obtain administrative privileges by modifying the logincookie[user] setting in the login cookie.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php-post ≫ Php-post Version0.21
Php-post ≫ Php-post Version1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 16.55% 0.966
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/21115
Vendor Advisory
http://securityreason.com/securityalert/1264
http://www.kapda.ir/advisory-380.html
Exploit
http://www.securityfocus.com/archive/1/440419/100/0/threaded
http://www.securityfocus.com/bid/19046
Exploit
http://www.vupen.com/english/advisories/2006/2877
https://exchange.xforce.ibmcloud.com/vulnerabilities/27862
https://www.exploit-db.com/exploits/2036