ID de Prueba:	1.3.6.1.4.1.25623.1.0.19239
Categoría:	Web application abuses
Título:	phpauction Admin Authentication Bypass
Resumen:	The remote host is running phpauction prior or equal to 2.0 (or a modified; version).;; There is a flaw when handling cookie-based authentication credentials which; may allow an attacker to gain unauthorized administrative access to the; auction system.
Descripción:	Summary: The remote host is running phpauction prior or equal to 2.0 (or a modified version). There is a flaw when handling cookie-based authentication credentials which may allow an attacker to gain unauthorized administrative access to the auction system. Solution: Upgrade to a version > 2.0 of this software and/or restrict access rights to the administrative directory using .htaccess. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2005 Tobias Glemser (tglemser@tele-consulting.com)

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.