Authentication Bypass in Active PHP Bookmarks by ActivePHP
CVE-2003-1255

Currently unrated

Key Information:

Vendor: Active PHP Bookmarks
Status: Active PHP Bookmarks
Vendor: CVE Published:; 31 December 2003

🔔 Create Active PHP Bookmarks Vulnerability Alert

What is CVE-2003-1255?

A security issue exists in Active PHP Bookmarks version 1.1.01, where attackers can exploit a vulnerability in the add_bookmark.php script. This flaw allows unauthorized users to add bookmarks on behalf of legitimate users by manipulating the auth_user_id parameter. Consequently, this could lead to unauthorized content being associated with other users' accounts, potentially breaching user privacy and trust.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/11011

vdb-entryx_refsource_XF

http://archives.neohapsis.com/archives/bugtraq/2003-01/00...

mailing-listx_refsource_BUGTRAQ

http://www.securityfocus.com/bid/6546

vdb-entryx_refsource_BID

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Nov 16, 2005
Vulnerability published
Dec 31, 2003

CVE-2003-1255 Data

JSON