CVEDB API

login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.9%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2005-2203

Phpwishlist » Phpwishlist » Version: 0.1.10

cpe:2.3:a:phpwishlist:phpwishlist:0.1.10
Phpwishlist » Phpwishlist » Version: 0.1.11

cpe:2.3:a:phpwishlist:phpwishlist:0.1.11
Phpwishlist » Phpwishlist » Version: 0.1.12

cpe:2.3:a:phpwishlist:phpwishlist:0.1.12
Phpwishlist » Phpwishlist » Version: 0.1.13

cpe:2.3:a:phpwishlist:phpwishlist:0.1.13
Phpwishlist » Phpwishlist » Version: 0.1.14

cpe:2.3:a:phpwishlist:phpwishlist:0.1.14
Phpwishlist » Phpwishlist » Version: 0.1.9

cpe:2.3:a:phpwishlist:phpwishlist:0.1.9