EUVD-2006-1030

Malware in sbrugna...

CVE-2006-1026

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...

Design/Logic Flaw

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...

CVE-2006-1026: Undefined Security Weakness

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...

CVE-2006-1026

CVE-2006-1026 affects JFacets before 0.2. The issue allows remote attackers to escalate privileges to any account by issuing a GET request with a modified account profileID. The description directly states privilege escalation via crafted request; no exploitation specifics are provided beyond tha...

CVE-2006-1026

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...

[SA19031] JFacets "ProfileID" Profile Change Vulnerability

TITLE: JFacets "ProfileID" Profile Change Vulnerability SECUNIA ADVISORY ID: SA19031 VERIFY ADVISORY: http://secunia.com/advisories/19031/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: JFacets 0.x http://secunia.com/product/8441/ DESCRIPTION: A vulnerability has bee...