CVE-2008-4700

SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...

Sql injection

SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...

CVE-2008-4700

SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...

Sql injection

SQL injection vulnerability in classauth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php...

Session fixation

Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...

CVE-2007-4203

Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...

CVE-2007-4203: Improper Authentication

Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...

Session fixation

Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...

CVE-2007-3597

Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...

CVE-2007-3597: Improper Authentication

Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...

CVE-2007-2821

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...

DEBIAN-CVE-2007-2821

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...

CVE-2007-2821

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...

Sql injection

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...

CVE-2007-2821

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...

CVE-2007-2821: Undefined Security Weakness

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter...

Advanced Guestbook index.php lang Cookie Parameter Path Disclosure

The remote host is running Advanced Guestbook, a free guestbook written in PHP. The installed version of Advanced Guestbook fails to validate input to the 'lang' cookie before using it as a language template. An unauthenticated, remote attacker may be able to exploit these issues to view arbitrar...

PT-2007-1370 · Mambo · Mambo Laithai

Name of the Vulnerable Software and Affected Versions: Mambo LaiThai versions 4.5.4 SP2 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the usercookiepassword cookie parameter. Recommendations: For Mambo LaiThai versions 4.5.4 SP2...

CVE-2007-0893

CVE-2007-0893 affects phpMyVisites prior to version 2.2. A directory traversal flaw lets remote attackers include arbitrary files by supplying leading ".." sequences in the pmv_ck_view cookie parameter, bypassing the protection scheme. This is a straightforward file inclusion risk that can impact...

CVE-2007-0893

Directory traversal vulnerability in phpMyVisites before 2.2 allows remote attackers to include arbitrary files via leading ".." sequences on the pmvckview COOKIE parameter, which bypasses the protection scheme...