PwsPHP 1.2.2 allows remote attackers to bypass authentication and post arbitrary comments via the Pseudo cookie.
Link | Tags |
---|---|
http://www.osvdb.org/16235 | vdb entry |
http://marc.info/?l=bugtraq&m=111565808024581&w=2 | mailing list |
https://exchange.xforce.ibmcloud.com/vulnerabilities/20503 | vdb entry |
http://secunia.com/advisories/15315 | third party advisory |