PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions and obtain administrative privileges by modifying the logincookie[user] setting in the login cookie.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php-post | Php-post | 0.21 (including) | 0.21 (including) |
| Php-post | Php-post | 1.0 (including) | 1.0 (including) |