CVE-2009-4872

CVE-2009-4872 affects Logoshows BBS 2.0, specifically globepersonnel_login.asp. The vulnerability is multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL via the username or password fields. The connected records confirm the affected component/file and the underlying ...

CVE-2009-4872: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2009-4546

The CVE-2009-4546 entry affects Logoshows BBS 2.0, specifically the globepersonnel_login.asp authentication page. The vulnerability allows remote attackers to bypass authentication and gain administrative access by manipulating cookies (pb_username and level). This corresponds to a cookie-based a...

CVE-2009-4546: Improper Input Validation

globepersonnellogin.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the 1 pbusername aka pb%5Fusername and 2 level cookies...

logoshows bbs 2.0 - File Disclosure Insecure Cookie Handling

logoshows bbs 2.0 - File Disclosure Insecure Cookie Handling Logoshows BBS 2.0 DD ZoRLu yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref: http://www.milw0rm.com/exploits/9389 vuln: http://www.logoshows.com/bbs/database/globepersonnel.mdb Logoshows BBS 2.0 ICH yildirimordulari.co...

logoshows bbs 2.0 - File Disclosure / Insecure Cookie Handling

Logoshows BBS 2.0 DD ZoRLu yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref: http://www.milw0rm.com/exploits/9389 vuln: http://www.logoshows.com/bbs/database/globepersonnel.mdb Logoshows BBS 2.0 ICH yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref:...