setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Professional_home_page_tools_guestbook | Professional_home_page_tools | * | * |