high7.5
CVE-2005-2400
The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges.
Impact
The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpfinance | Phpfinance | Version 0.3 |
References
- NVD record
- CVE.org record
- http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.conf.php?rev=1.2&view=log
- http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.login.php?rev=1.2&view=log
- http://secunia.com/advisories/13276
- http://sourceforge.net/project/shownotes.php?release_id=343135
- http://www.securityfocus.com/bid/14322
- http://www.vupen.com/english/advisories/2005/1133
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21426
- http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.conf.php?rev=1.2&view=log
- http://cvs.sourceforge.net/viewcvs.py/phpfinance/phpfinance/inc.login.php?rev=1.2&view=log
- http://secunia.com/advisories/13276
- http://sourceforge.net/project/shownotes.php?release_id=343135
- http://www.securityfocus.com/bid/14322
- http://www.vupen.com/english/advisories/2005/1133
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21426