Description
check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote attackers to bypass authentication.
References
- 18793 third-party-advisory
- 16586 vdb-entry
- 23026 vdb-entry
- phphd-check-security-bypass(24510) vdb-entry
- 20060212 [eVuln] phphd Multiple Vulnerabilities mailing-list
- http://www.evuln.com/vulns/60/summary.html