Code injection

BellaBiblio allows remote attackers to gain administrative privileges via a bellabiblio cookie with the value "administrator." NOTE: this issue is disputed by CVE and multiple third parties because the cookie value must be an MD5 hash...

CVE-2007-4230

BellaBiblio allows remote attackers to gain administrative privileges via a bellabiblio cookie with the value "administrator." NOTE: this issue is disputed by CVE and multiple third parties because the cookie value must be an MD5 hash...

CVE-2007-4230

BellaBiblio is affected by a cookie-based privilege escalation where a bellabiblio cookie with the value “administrator” can grant remote admin privileges. The issue’s root cause involves cookie value validation, but this is disputed: several sources state the cookie value must be an MD5 hash rat...

CVE-2007-4230

BellaBiblio allows remote attackers to gain administrative privileges via a bellabiblio cookie with the value "administrator." NOTE: this issue is disputed by CVE and multiple third parties because the cookie value must be an MD5 hash...

PT-2007-5423 · Unknown · Bellabiblio

Name of the Vulnerable Software and Affected Versions: BellaBiblio affected versions not specified Description: The issue allows remote attackers to potentially gain administrative privileges. It involves setting a bellabiblio cookie with a specific value. However, it's noted that the cookie valu...

BellaBiblio Admin Login Bypass

BellaBiblio Admin Login Bypass SCRIPT: BellaBiblio DOWNLOAD: http://www.jemjabella.co.uk/scripts/BellaBiblio.zip AUTHOR: ilker kandemir ilkerkandemiratmynet.com Bug in;admin.php if isset$COOKIE'bellabiblio' if $COOKIE'bellabiblio' == md5$adminname.$adminpass.$secret if isset$GET'ap' $page =...