Description
phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication.
References
- http://evuln.com/vulns/61/summary.html
- 18791 third-party-advisory
- 16587 vdb-entry
- 427 third-party-advisory
- 20060212 [eVuln] phpstatus Authentication Bypass mailing-list