EUVD-2006-2630

Malware in sbrugna...

Code injection

phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfoxuser parameter...

CVE-2006-2631

phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfoxuser parameter...

CVE-2006-2631

phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfoxuser parameter...

CVE-2006-2631

phpFoX is affected by an authentication-bypass like issue where remote authenticated users can modify arbitrary accounts by tampering with a NATIO cookie value, potentially the phpfox_user parameter. The root cause is a cookie handling flaw that allows escalation of privileges within authenticate...