PHPFinance Inc.login.PHP Authentication Bypass Vulnerability
BID:14322
Info
PHPFinance Inc.login.PHP Authentication Bypass Vulnerability
| Bugtraq ID: | 14322 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 19 2005 12:00AM |
| Updated: | Jul 19 2005 12:00AM |
| Credit: | The vendor announced this vulnerability. |
| Vulnerable: |
PHPFinance PHPFinance 0.3 |
| Not Vulnerable: |
PHPFinance PHPFinance 0.4 |
Discussion
PHPFinance Inc.login.PHP Authentication Bypass Vulnerability
PHPFinance is prone to an authentication bypass vulnerability. An error in the authentication mechanism can permit attackers to bypass authentication and gain access to the vulnerable application.
Once access has been achieved, the malicious user has full control of the application. This may aid in further attacks against the underlying system.
PHPFinance is prone to an authentication bypass vulnerability. An error in the authentication mechanism can permit attackers to bypass authentication and gain access to the vulnerable application.
Once access has been achieved, the malicious user has full control of the application. This may aid in further attacks against the underlying system.
Exploit / POC
PHPFinance Inc.login.PHP Authentication Bypass Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
PHPFinance Inc.login.PHP Authentication Bypass Vulnerability
Solution:
The vendor has addressed this issue in version 0.4.
PHPFinance PHPFinance 0.3
Solution:
The vendor has addressed this issue in version 0.4.
PHPFinance PHPFinance 0.3
-
PHPFinance phpfinance0.4.zip
http://prdownloads.sourceforge.net/phpfinance/phpfinance0.4.zip
References
PHPFinance Inc.login.PHP Authentication Bypass Vulnerability
References:
References:
- PHPFinance Forum (PHPFinance)
- PHPFinance Web Site (PHPFinance)