CVE-2007-5109

Cross-site request forgery (CSRF) in index.php of FlatNuke 2.6 (and possibly 3) allows remote attackers to change user password and privilege level by manipulating the user, regpass, and level parameters in a none_Login action, demonstrated via a Flash object. No explicit remediation is provided ...

CVE-2006-5109

CVE-2006-5109 affects CubeCart 2.0.x. A direct request to (1) link_navi.php or (2) spotlight.php allows remote attackers to disclose server paths via error messages, exposing sensitive information. The issue is specific to CubeCart 2.0.x; the note clarifies that other vectors (information.php, la...