10
CVSSv2

CVE-2007-3647

Published: 10/07/2007 Updated: 15/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and previous versions allows remote malicious users to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

zoneo-soft phptraffica 1.4.3

zoneo-soft phptraffica 1.4

zoneo-soft phptraffica 1.4.2