EUVD-2009-4949

Malware in sbrugna...

Authentication flaw

admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a different vector than CVE-2008-3211...

CVE-2008-3211

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1...

CVE-2008-3211

CVE-2008-3211 affects Scripteen Free Image Hosting Script 1.2 and 1.2.1. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1, enabling unauthorized admin actions. This is a cookie-based auth bypass, with no expl...