EUVD-2008-1904

Malware in sbrugna...

EUVD-2007-1510

Malware in sbrugna...

Design/Logic Flaw

Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...

CVE-2008-1904

Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...

CVE-2008-1904

Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...

CVE-2008-1904

CVE-2008-1904 affects CcMail 1.0.1 and earlier. The root cause is that the application does not verify that the this_cookie cookie corresponds to an authenticated session, allowing remote attackers to obtain access to the admin area by modifying the this_cookie cookie. The NVD entry documents thi...

CVE-2007-1516

PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functionsdir parameter...

CVE-2007-1516

CVE-2007-1516 describes a PHP remote file inclusion vulnerability in the CcMail 1.0 package, where an attacker can cause arbitrary PHP code execution by supplying a URL in the functions_dir parameter of functions/update.php. The affected product is Cicoandcico CcMail 1.0, and the underlying issue...

CVE-2007-1516

PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functionsdir parameter...