Web Insecurity

PHP TopSites Setup.PHP Authentication Bypass Vulnerabili

July 22nd, 2005

PHP TopSites is prone to an authentication bypass vulnerbility. An attacker may bypass authentication and gain access to the vulnerable application.

Once access has been achieved, the malicious user has full control of the application. This may aid in further attacks against the underlying system.

Vulnerable Versions:
PHP TopSites PRO PHP TopSites PRO 2.2
PHP Topsites FREE PHP Topsites FREE 2.2

The orignal vulnerability post can be found here.

Entry Filed under: Vulnerabilities