Description
Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, and possibly other PHP scripts under admin/.
References
- 1717 third-party-advisory
- eazycart-admin-authentication-bypass(29419) vdb-entry
- 20061010 MHL-2006-001 Public Advisory: "Eazy Cart" Multiple Security Issues mailing-list
- http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001
- 1017041 vdb-entry
- 22286 third-party-advisory
- http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt