Security Advisory

CVE-2005-2252

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-07-13 04:00:00
Last updated 2024-08-07 22:22:48
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.