Vulnerability in Gianluca Baldo Phpauction

CVE-2005-2252

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.

EPSS: 0.014 (69.8th percentile) — read the EPSS interpretation.

Affected products

Gianluca_baldo Phpauction — versions 2.5
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)