CVE-2006-1700

Description

Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication.

Affected products

• aweb / scripts_seller

References

• MISChttp://securitytracker.com/id?1015878
• VENDOR_ADVISORYhttp://secunia.com/advisories/19626
• MISChttp://www.securityfocus.com/bid/17417