CVE:CVE-2005-2203
CNNVD:CNNVD-200507-088
phpWishlist是一套PHP脚本编写的web应用。
phpWishlist 0.1.15之前版本中的login.php存在绕过身份认证漏洞。
远程攻击者可通过直接访问admin.php，绕过登录认证。
solution:Upgrade phpwishlist phpwishlist to a higher version than 0.1.9,0.1.10,0.1.11,0.1.12,0.1.13,0.1.14,and avoid the version 0.1.9,0.1.10,0.1.11,0.1.12,0.1.13,0.1.14