Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wqvh-rrpc-fpj4

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.

EPSS

Процентиль: 68%
0.00572
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.

EPSS

Процентиль: 68%
0.00572
Низкий