6 matches found
CVE-2007-0926
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...
Design/Logic Flaw
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...
CVE-2007-0926
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...
CVE-2007-0926
The CVE-2007-0926 issue affects KvGuestbook 1.0 Beta, specifically the dologin function in guestbook.php. The vulnerability allows remote attackers to gain administrative privileges, probably by manipulating the $mysql['pass'] and $gbpass variables. The available sources confirm the affected comp...
CVE-2007-0926: Undefined Security Weakness
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...
KvGuestbook Remote Add Admin Exploit
Version : 1.0 Beta Download : http://www.killervault.com Files : guestbook.php Error : function dologin global $mysql, $gbpass, $gburl; $time = time + 86400365; if$gbpass == $mysql'pass' setcookie'kvgbcookie', $mysql'pass', $time, '/'; header"Location: $gburl"; $mysql, $gbpass, $gburl Mysql & Adm...