Authentication flaw

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

CVE-2007-4416

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

CVE-2007-4416

CVE-2007-4416 concerns BellaBook (aka BellaBuffs) where captcha.php can let remote attackers obtain administrative privileges by sending the admin_name in a pheap_login cookie. The vendor disputes the flaw, noting authentication depends on admin_pass and secret variables in addition to admin_name...

CVE-2007-4416

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

PT-2007-5597 · Bellabook · Bellabook

Name of the Vulnerable Software and Affected Versions: BellaBook affected versions not specified Description: The issue allows remote attackers to potentially obtain administrative privileges. This is achieved by sending the admin's username admin name in a pheap login cookie. The vendor disputes...