Security Advisory
CVE-2006-2631
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfox_user parameter.