← Database

CVE-2005-2252

HIGH CVSS: 7.5 Published: 2005-07-13 Modified: 2026-06-16

Description

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.

Affected Platforms

Gianluca Baldo Phpauction

Weakness Type

NVD-CWE-Other

References