high7.5Public exploit code
CVE-2004-2715
edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to f…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpHeaven phpMyChat 0.14.5 - 'edituser.php3?do_not_login' Authentication Bypass2004-06-15 · webapps · php · Verified
Impact
edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Heaven | Phpmychat | Version 0.14.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html
- http://secunia.com/advisories/11894
- http://securitytracker.com/id?1010515
- http://www.osvdb.org/7149
- http://www.securityfocus.com/bid/10556
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16440
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html
- http://secunia.com/advisories/11894
- http://securitytracker.com/id?1010515
- http://www.osvdb.org/7149
- http://www.securityfocus.com/bid/10556
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16440