Authentication flaw

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Authentication flaw

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Authentication flaw

Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6858

CVE-2008-6858 affects Absolute Banner Manager .NET 4.0. The weakness allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a specific value. The official description consistently states this is an authentication bypass leading to admin-level access...

CVE-2008-6857

CVE-2008-6857 affects Absolute Podcast .NET 1.0. The issue lets a remote attacker bypass authentication and gain administrative access by setting a specific cookie value. The vulnerability is described in CVE sources as an authentication bypass with partial confidentiality/integrity/availability ...

CVE-2008-6859

Consolidated data from connected documents confirms CVE-2008-6859 affects Xigla Software Absolute Control Panel XE 1.5. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value. Exploitation is feasible over network wit...

CVE-2008-6858

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6863

CVE-2008-6863 : Xigla Software Absolute Form Processor .NET 4.0 contains an authentication bypass. Remote attackers can gain administrative access by setting a specific cookie value. Impact is described as partial confidentiality, integrity, and availability with a CVSS v2 base score of 7.5 (HIGH...

CVE-2008-6862

The CVE-2008-6862 issue affects Absolute Content Rotator 6.0, where remote attackers can bypass authentication and gain administrative access by setting a specific cookie value. Affected component: authentication mechanism in the product (cookie-based bypass). Documented impact: administrative pr...

CVE-2008-6861

The CVE-2008-6861 issue affects Xigla Software Absolute Newsletter (version 6.0 and 6.1). The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value, enabling partial confidentiality/integrity/availability impact as per the...

CVE-2008-6856

The CVE-2008-6856 entry concerns Xigla Software Absolute News Manager.NET 5.1. According to the provided records, the vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value. The core issue is an authentication bypass via co...

CVE-2008-6860

CVE-2008-6860 affects Xigla Software Absolute Poll Manager XE 4.1. The vulnerability is an authentication bypass: remote attackers can gain administrative access by setting a specific cookie value. This is documented across multiple sources (NVD/NVD duplicate entries, PRION, CVELIST). The provide...

CVE-2008-6864

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6855

Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie...

CVE-2008-6864

CVE-2008-6864 affects Xigla Software Absolute Live Support .NET 5.1. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value, effectively compromising session integrity. This is a client-side/authentication bypass issu...

Path traversal

Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded "/" slash in the file parameter...

CVE-2009-2180

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via 1 a .. dot dot or 2 absolute path in the file parameter...

CVE-2009-2184

Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded "/" slash in the file parameter...

CVE-2009-2184

CVE-2009-2184 affects Gravy Media Photo Host 1.0.8, with an absolute path traversal vulnerability in forcedownload.php. The underlying issue allows remote attackers to read arbitrary files by supplying an encoded "/" in the file parameter. According to the NVD entry, the vulnerability has a Base ...

Path traversal

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...