OSVDB ID: 54203 Title: PHP Site Lock index.php Multiple Cookie Manipulation Admin Authentication Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
PHP Site Lock contains a flaw that may allow the attacker to bypass certain security restrictions. The issue is triggered when a remote attacker gains administrative access to the application by creating the cookies "login_id", "group_id", "login_name", "user_id", user_type" and assigning them valid but guessable values. It is possible that the flaw may allow access to the administrative interface resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public Disclosure: Uncoordinated Disclosure OSVDB: Web Related |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|