EUVD-2008-0305

Malware in sbrugna...

EUVD-2008-0304

Malware in sbrugna...

Authentication flaw

Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the showfoot function...

CVE-2008-0293

Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the showfoot function...

CVE-2008-0294

Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat more than once via unspecified vectors...

Code injection

Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat more than once via unspecified vectors...

CVE-2008-0294

CVE-2008-0294 affects FreeSeat prior to 1.1.5d. A flaw in the seat-locking implementation could allow an attacker to book a seat more than once via unspecified vectors. The vulnerability originates in the seat-locking logic; the exact attack vector is not detailed in the provided sources. The cit...

CVE-2008-0293

CVE-2008-0293 affects FreeSeat prior to 1.1.5d, where cron.php can bypass authentication and grant privileges when format.php has certain modifications. The underlying issue is tied to the show_foot function, enabling remote attackers to escalate privileges. Public details in the provided documen...

CVE-2008-0293

Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the showfoot function...

CVE-2008-0294

Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat more than once via unspecified vectors...