CVE-2006-3092

CVE-2006-3092 describes an authentication bypass vulnerability in PhpMyFactures versions 1.2 and earlier. Remote attackers can exploit this by directly requesting specific PHP scripts with modified parameters, allowing them to add or modify data related to VAT, discounts, countries, product categories, products, and clients. This vulnerability has a CVSS score of 7.5, indicating high severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to unauthorized disclosure, modification, and denial of service. There is no known active exploitation, nor are there publicly available Metasploit, Nuclei, or ExploitDB modules. However, there is some community discussion, including a Reddit post inquiring about exploiting this vulnerability to bypass Linux server authentication.