EDB-27205
functionalVirtual Hosting Control System 2.2/2.4 - 'login.php?check_login()' Authentication Bypass
view exploit source exploit_dbverifiedtype webappsauthor Roman Medina-Heigl Hernandezpublished 2006-02-13catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2006-0685US | high10.0 | Exploit | ||
The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain un… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan