EUVD-2006-2169

Malware in sbrugna...

FileProtection101.txt

FileProtection Express = 1.0.1 authentification bypass Discovered by: Nomenumbra Date: 5/2/2006 impact:high privilege escalation,full file access Ok, this is absurd, the only form of authentification to the Admin panel is controlled by a cookie value. Use firefox CookieEditor extension for exampl...

Authentication flaw

FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1...

CVE-2006-2168

FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1...

CVE-2006-2168

FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1...

CVE-2006-2168

CVE-2006-2168 affects FileProtection Express 1.0.1 and earlier. The vulnerability allows remote attackers to bypass authentication by presenting a cookie with an Admin value of 1. The available connected records confirm the affected product/version and the root cause (cookie-based admin flag bypa...

FileProtection Express <= 1.0.1 authentification bypass

FileProtection Express = 1.0.1 authentification bypass Discovered by: Nomenumbra Date: 5/2/2006 impact:high privilege escalation,full file access Ok, this is absurd, the only form of authentification to the Admin panel is controlled by a cookie value. Use firefox CookieEditor extension for exampl...