CVE-2008-3938

CVE-2008-3938 describes a CSRF flaw in Open Media Collectors Database (OpenDb) 1.0.6, where an attacker can induce a remote user to perform an update_password action via user_admin.php, potentially changing arbitrary passwords. The issue affects the vulnerability in the OpenDb interface, with the...

CVE-2008-3937

OpenDb (Open Media Collectors Database) version 1.0.6 contains multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary script/HTML via three inputs: user_id in edit action to user_admin.php, title in listings.php, and redirect_url in user_profile...

OpenDB 1.0.6 - user_admin.php?user_id Cross-Site Scripting

OpenDB 1.0.6 - useradmin.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thes...

CVE-2008-2020

The CAPTCHA implementation as used in 1 Francisco Burzi PHP-Nuke 7.0 and 8.1, 2 my123tkShop e-Commerce-Suite aka 123tkShop 0.9.1, 3 phpMyBitTorrent 1.2.2, 4 TorrentFlux 2.3, 5 e107 0.7.11, 6 WebZE 0.5.9, 7 Open Media Collectors Database aka OpenDb 1.5.0b4, and 8 Labgab 1.1 uses a codebg.jpg...

CVE-2008-2020

The CVE-2008-2020 issue affects multiple CAPTCHA implementations: PHP-Nuke (versions 7.0–8.1), my123tkShop 0.9.1, phpMyBitTorrent 1.2.2, TorrentFlux 2.3, e107 0.7.11, WebZE 0.5.9, Open Media Collectors Database 1.5.0b4, and Labgab 1.1. The root cause is use of a code_bg.jpg background with PHP Im...

PT-2008-3540 · Francisco Burzi +7 · Php-Nuke +7

Name of the Vulnerable Software and Affected Versions: Francisco Burzi PHP-Nuke versions 7.0 through 8.1 my123tkShop e-Commerce-Suite version 0.9.1 phpMyBitTorrent version 1.2.2 TorrentFlux version 2.3 e107 version 0.7.11 WebZE version 0.5.9 Open Media Collectors Database version 1.5.0b4 Labgab...