PT-2007-6317 · Ossigeno · Ossigeno Cms

Name of the Vulnerable Software and Affected Versions: Ossigeno CMS version 2.2 alpha3 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the level parameter in the upload/common/footer.php file. Recommendations: For Ossigeno CMS version 2.2 alpha3, consider...

CVE-2007-5109

Cross-site request forgery CSRF vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified 1 regpass and 2 level parameters in a noneLogin action, as demonstrated by using...

UBUNTU-CVE-2007-5109

Cross-site request forgery CSRF vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified 1 regpass and 2 level parameters in a noneLogin action, as demonstrated by using...

CVE-2007-5109

Cross-site request forgery CSRF vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified 1 regpass and 2 level parameters in a noneLogin action, as demonstrated by using...