Unscored CVE-2006-2631 EUVD-2006-2630GHSA-qj9f-rx22-hq52

phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfox_user parameter.

Published May 27, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfox_user parameter.

References

phpfox-cookie-security-bypass(26697) vdb-entry
ADV-2006-1994 vdb-entry
20060601 Re: phpFoX All Version Login Exploit mailing-list
20280 third-party-advisory
20060523 phpFoX All Version Login Exploit mailing-list
969 third-party-advisory