210 matches found
CVE-2008-4700
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...
Sql injection
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...
CVE-2008-4700
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...
Sql injection
SQL injection vulnerability in classauth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php...
Session fixation
Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-4203
Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...
Session fixation
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-3597
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-2821
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...
CVE-2007-2821
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...
DEBIAN-CVE-2007-2821
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...
Sql injection
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...
CVE-2007-2821
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...
Advanced Guestbook index.php lang Cookie Parameter Path Disclosure
The remote host is running Advanced Guestbook, a free guestbook written in PHP. The installed version of Advanced Guestbook fails to validate input to the 'lang' cookie before using it as a language template. An unauthenticated, remote attacker may be able to exploit these issues to view arbitrar...
PT-2007-1370 · Mambo · Mambo Laithai
Name of the Vulnerable Software and Affected Versions: Mambo LaiThai versions 4.5.4 SP2 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the usercookiepassword cookie parameter. Recommendations: For Mambo LaiThai versions 4.5.4 SP2...
CVE-2007-0893
Directory traversal vulnerability in phpMyVisites before 2.2 allows remote attackers to include arbitrary files via leading ".." sequences on the pmvckview COOKIE parameter, which bypasses the protection scheme...
CVE-2007-0893
CVE-2007-0893 affects phpMyVisites prior to version 2.2. A directory traversal flaw lets remote attackers include arbitrary files by supplying leading ".." sequences in the pmv_ck_view cookie parameter, bypassing the protection scheme. This is a straightforward file inclusion risk that can impact...
[KAPDA::#61] - PacPoll <= 4.0 Multiple Vulnerabilities
KAPDA New advisory Vulnerable product : PacPoll = 4.0 Vendor: http://www.pacosdrivers.com/asp/poll/poll.asp Vulnerability: Admin Logon bypass , SQLInjection Date : -------------------- Found : 2006/10/10 Vendor Contacted : N/A Release Date : 2006/10/25 Vulnerabilities: -------------------- Admin...
EUVD-2006-4708
Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the language Cookie parameter, as demonstrated by executing PHP code via a log file...