VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 13, 2005· Updated Jun 16, 2026

CVE-2005-2252

CVE-2005-2252

Description

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.

Affected products

2
  • Phpauction/Phpauction2 versions
    cpe:2.3:a:gianluca_baldo:phpauction:2.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gianluca_baldo:phpauction:2.5:*:*:*:*:*:*:*
    • (no CPE)range: =2.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.