Description
Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting view_caricatier.php, and then requesting any file in the admin directory with a cookie_username=admin argument.
References
- al-caricatier-ss-bypass-security(22840) vdb-entry
- 20051022 Vulnerability in AL-Caricatier, V.2.5 And Prior Versions mailing-list
- ADV-2005-2181 vdb-entry
- 15162 vdb-entry
- 17292 third-party-advisory