EUVD-2008-6723

Malware in sbrugna...

CVE-2008-6763

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the loggedin cookie to that account's username...

CVE-2008-6763

CVE-2008-6763 affects Silentum LoginSys 1.0.0: login2.php allows remote bypass of authentication by setting the logged_in cookie to a target username, enabling access to arbitrary accounts. CVSS2/BASE ~7.5 (HIGH) with network attack vector and no user interaction required; impact includes partial...