CVE-2006-3772

PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions and obtain administrative privileges by modifying the logincookie[user] setting in the login cookie.

CVSS v2.0

5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

16.85% chance of exploitation in the next 30 days, 97th percentile

Published

2006-07-21

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/2036

References

• CVE Record
• NVD entry

Related

• CVE-2006-3771
• CVE-2006-3773
• CVE-2006-3763
• CVE-2006-3774
• CVE-2006-3755
• CVE-2006-3775