EUVD-2007-1510

Malware in sbrugna...

EUVD-2008-1904

Malware in sbrugna...

CVE-2008-1904

Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...

Design/Logic Flaw

Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...

CVE-2008-1904

Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...

CVE-2008-1904: Improper Authentication

Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...

CVE-2007-1516

PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functionsdir parameter...

CVE-2007-1516

PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functionsdir parameter...

CVE-2007-1516

CVE-2007-1516 describes a PHP remote file inclusion vulnerability in the CcMail 1.0 package, where an attacker can cause arbitrary PHP code execution by supplying a URL in the functions_dir parameter of functions/update.php. The affected product is Cicoandcico CcMail 1.0, and the underlying issue...