Description
SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via spoofing a cookie.
References
- 59255 vdb-entry
- http://www.openwall.com/lists/oss-security/2013/04/17/1
- 83629 vdb-entry
Unscored
CVE-2013-2499
EUVD-2013-2445GHSA-w2rx-6hqj-cx84
SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via spoofing a cookie.
Published Jan 27, 2020 · Updated Aug 6, 2024 · Assigned by mitre