CVE-2007-4416

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

Authentication flaw

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

CVE-2007-4416

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

CVE-2007-4416

CVE-2007-4416 concerns BellaBook (aka BellaBuffs) where captcha.php can let remote attackers obtain administrative privileges by sending the admin_name in a pheap_login cookie. The vendor disputes the flaw, noting authentication depends on admin_pass and secret variables in addition to admin_name...

PT-2007-5597 · Bellabook · Bellabook

Name of the Vulnerable Software and Affected Versions: BellaBook affected versions not specified Description: The issue allows remote attackers to potentially obtain administrative privileges. This is achieved by sending the admin's username admin name in a pheap login cookie. The vendor disputes...

CVE-2007-4416: Undefined Security Weakness

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...