|
PHP Site Lock contains a flaw that may allow the attacker to bypass certain security restrictions. The issue is triggered when a remote attacker gains administrative access to the application by creating the cookies "login_id", "group_id", "login_name", "user_id", user_type" and assigning them valid but guessable values. It is possible that the flaw may allow access to the administrative interface resulting in a loss of integrity.
|
