← Database

CVE-2006-3772

MEDIUM CVSS: 5.1 Published: 2006-07-24 Modified: 2026-06-16

Description

PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions and obtain administrative privileges by modifying the logincookie[user] setting in the login cookie.

Affected Platforms

Php-Post Php-Post

Weakness Type

NVD-CWE-Other

References