CVE-2006-0654: Hinton Design Phpht Topsites

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies.

Affected products

• Hinton Design Phpht Topsites: version 1.3 only

Published 2006-02-13. Last modified 2026-06-16.