165 matches found
CVE-2008-3602
The CVE-2008-3602 entry concerns PHP-Ring Webring System (aka uPHP_ring_website) version 0.9.1. A flaw in admin/wr_admin.php allows remote attackers to bypass authentication and obtain administrative access by setting the admin cookie to 1. This is a cookie-based authentication bypass that enable...
CVE-2008-3602
creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6225...
CVE-2007-3602
The CVE concerns vtiger CRM’s SOAP webservice prior to 5.0.3. The vulnerability arises because the service does not verify that authenticated accounts are active, allowing remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin. Affec...
CVE-2006-3602
CVE-2006-3602 affects FarsiNews 3.0 BETA 1, via directory traversal in jscripts/tiny_mce/tiny_mce_gzip.php. The underlying flaw allows remote attackers to include arbitrary files by supplying .. and a trailing null (%00) byte in the language parameter of the advanced theme, enabling partial integ...
Netscreen VPN Detection
Binary data 3602.prm...