Description
The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges.
References
- http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.login.php?rev=1.2&view=log
- ADV-2005-1133 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=343135
- http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.conf.php?rev=1.2&view=log
- 14322 vdb-entry
- phpfinance-logon-bypass(21426) vdb-entry
- 13276 third-party-advisory