CVE-2006-0685

The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

5.23% chance of exploitation in the next 30 days, 92th percentile

Published

2006-02-15

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27205

References

• CVE Record
• NVD entry

Related

• CVE-2006-0684
• CVE-2006-0687
• CVE-2006-0681
• CVE-2006-0688
• CVE-2006-0679
• CVE-2006-0691