Authentication flaw

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

CVE-2007-4416

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

CVE-2007-4416

CVE-2007-4416 concerns BellaBook (aka BellaBuffs) where captcha.php can let remote attackers obtain administrative privileges by sending the admin_name in a pheap_login cookie. The vendor disputes the flaw, noting authentication depends on admin_pass and secret variables in addition to admin_name...