high7.5
CVE-2006-0182
login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside".
Impact
login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acal | Calendar Project | Version 2.2.5 |
References
- NVD record
- CVE.org record
- http://evuln.com/vulns/25/summary.html
- http://secunia.com/advisories/18432
- http://securityreason.com/securityalert/343
- http://www.osvdb.org/22344
- http://www.securityfocus.com/archive/1/421744/100/0/threaded
- http://www.vupen.com/english/advisories/2006/0152
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24104
- http://evuln.com/vulns/25/summary.html
- http://secunia.com/advisories/18432
- http://securityreason.com/securityalert/343
- http://www.osvdb.org/22344
- http://www.securityfocus.com/archive/1/421744/100/0/threaded
- http://www.vupen.com/english/advisories/2006/0152
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24104