22 matches found
EUVD-2007-3484
Malware in sbrugna...
EUVD-2007-1919
Malware in sbrugna...
EUVD-2016-3356
Malware in sbrugna...
EUVD-2018-16975
Malware in sbrugna...
Code injection
PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pchead.php, pclogin.php, and pcloginpage.php...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
Code injection
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-2272: Improper Access Control
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
Design/Logic Flaw
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...
CVE-2015-7490: Improper Access Control
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...
Path traversal
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...
CVE-2013-0456
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...
CVE-2013-0456: Undefined Security Weakness
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...
CVE-2009-4927
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...
CVE-2008-1904
Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...
CVE-2008-1904
Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...
CVE-2008-1134
OMEGA aka Omegasoft INterneSErvicesLosungen INSEL 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie...