EUVD-2006-4450

Malware in sbrugna...

CVE-2006-4462

Gonafish.com LinksCaffe 2.0 and 3.0 do not properly restrict access to administrator functions, which allows remote attackers to gain full administration rights via a direct request to Admin/admin1953.php...

CVE-2006-4462

Gonafish.com LinksCaffe 2.0 and 3.0 expose an access control flaw that lets remote attackers obtain full administrator rights via a direct request to Admin/admin1953.php. The affected components are the LinksCaffe admin functions, and the root cause is improper restriction of administrator-area a...

linkscaffe30.txt

Gonafish.com LinksCaffe 3.0 is free link indexing directory, we found that the file admin1953.php can be accessed directly to get full administration rights without password and username. Proof of exploit: http://www.example.com/pathtolinksCaffe/Admin/admin1953.php Or the images of mirror...