Description
check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access.
References
- ADV-2006-0480 vdb-entry
- 16541 vdb-entry
- 1015620 vdb-entry
- 18758 third-party-advisory
- http://evuln.com/vulns/58/description.html
- 20060211 [eVuln] phphg Guestbook Multiple Vulnerabilities mailing-list