Authentication flaw

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Authentication flaw

Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Authentication flaw

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6858

CVE-2008-6858 affects Absolute Banner Manager .NET 4.0. The weakness allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a specific value. The official description consistently states this is an authentication bypass leading to admin-level access...

CVE-2008-6857

CVE-2008-6857 affects Absolute Podcast .NET 1.0. The issue lets a remote attacker bypass authentication and gain administrative access by setting a specific cookie value. The vulnerability is described in CVE sources as an authentication bypass with partial confidentiality/integrity/availability ...

CVE-2008-6859

Consolidated data from connected documents confirms CVE-2008-6859 affects Xigla Software Absolute Control Panel XE 1.5. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value. Exploitation is feasible over network wit...

CVE-2008-6858

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6863

CVE-2008-6863 : Xigla Software Absolute Form Processor .NET 4.0 contains an authentication bypass. Remote attackers can gain administrative access by setting a specific cookie value. Impact is described as partial confidentiality, integrity, and availability with a CVSS v2 base score of 7.5 (HIGH...

CVE-2008-6862

The CVE-2008-6862 issue affects Absolute Content Rotator 6.0, where remote attackers can bypass authentication and gain administrative access by setting a specific cookie value. Affected component: authentication mechanism in the product (cookie-based bypass). Documented impact: administrative pr...

CVE-2008-6861

The CVE-2008-6861 issue affects Xigla Software Absolute Newsletter (version 6.0 and 6.1). The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value, enabling partial confidentiality/integrity/availability impact as per the...

CVE-2008-6860

CVE-2008-6860 affects Xigla Software Absolute Poll Manager XE 4.1. The vulnerability is an authentication bypass: remote attackers can gain administrative access by setting a specific cookie value. This is documented across multiple sources (NVD/NVD duplicate entries, PRION, CVELIST). The provide...

CVE-2008-6864

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6855

Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie...

CVE-2008-6864

CVE-2008-6864 affects Xigla Software Absolute Live Support .NET 5.1. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value, effectively compromising session integrity. This is a client-side/authentication bypass issu...

CVE-2008-6856

The CVE-2008-6856 entry concerns Xigla Software Absolute News Manager.NET 5.1. According to the provided records, the vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value. The core issue is an authentication bypass via co...

Path traversal

Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded "/" slash in the file parameter...

CVE-2009-2180

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via 1 a .. dot dot or 2 absolute path in the file parameter...

CVE-2009-2184

Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded "/" slash in the file parameter...

CVE-2009-2184

CVE-2009-2184 affects Gravy Media Photo Host 1.0.8, with an absolute path traversal vulnerability in forcedownload.php. The underlying issue allows remote attackers to read arbitrary files by supplying an encoded "/" in the file parameter. According to the NVD entry, the vulnerability has a Base ...

Path traversal

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...