24 matches found
EUVD-2016-3356
Malware in sbrugna...
EUVD-2018-16975
Malware in sbrugna...
EUVD-2007-3484
Malware in sbrugna...
EUVD-2007-1919
Malware in sbrugna...
Code injection
PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pchead.php, pclogin.php, and pcloginpage.php...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
Code injection
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
PT-2016-5081
Name of the Vulnerable Software and Affected Versions Eaton Lighting EG2 Web Control versions 4.04P and earlier Description The issue allows remote attackers to have an unspecified impact via a modified cookie. Recommendations For versions 4.04P and earlier, at the moment, there is no information...
CVE-2016-2272: Improper Access Control
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
Design/Logic Flaw
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...
PT-2016-1413
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5 through FP3 IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server versions 9.1 through 9.1.2.0 IBM InfoSphere Information Server versions 11.3 through 11.3.1...
CVE-2015-7490: Improper Access Control
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...
Path traversal
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...
CVE-2013-0456
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...
CVE-2013-0456: Undefined Security Weakness
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...
CVE-2009-4927
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...
CVE-2008-1904
Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...
CVE-2008-1904
Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...
CVE-2008-1134
OMEGA aka Omegasoft INterneSErvicesLosungen INSEL 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie...