Description
check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies.
References
- 16562 vdb-entry
- 20060211 [eVuln] phpht Topsites Multiple Vulnerabilities mailing-list
- http://evuln.com/vulns/59/summary.html
- 18782 third-party-advisory