Description
PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.
Unscored
CVE-2005-2252
EUVD-2005-2253GHSA-wqvh-rrpc-fpj4
PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie …
Published Jul 13, 2005 · Updated Aug 7, 2024 · Assigned by mitre