high7.5Public exploit code
CVE-2006-0153
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass aut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 427BB 2.2 - Authentication Bypass2006-01-09 · webapps · php · Verified
Impact
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 427bb | Fourtwosevenbb | Versions 2.2, 2.2.1 |
References
- NVD record
- CVE.org record
- http://evuln.com/vulns/18/summary.html
- http://secunia.com/advisories/18354
- http://www.osvdb.org/22274
- http://www.securityfocus.com/archive/1/421326/100/0/threaded
- http://www.securityfocus.com/bid/16178
- http://www.vupen.com/english/advisories/2006/0091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24038
- http://evuln.com/vulns/18/summary.html
- http://secunia.com/advisories/18354
- http://www.osvdb.org/22274
- http://www.securityfocus.com/archive/1/421326/100/0/threaded
- http://www.securityfocus.com/bid/16178
- http://www.vupen.com/english/advisories/2006/0091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24038