7.5
CVSSv2

CVE-2005-2252

Published: 13/07/2005 Updated: 05/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PhpAuction 2.5 allows remote malicious users to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.

Vulnerable Product Search on Vulmon Subscribe to Product

gianluca baldo phpauction 2.5