EUVD-2008-1969

Malware in sbrugna...

PhShoutBox <= 1.5 (final) Insecure Cookie Handling Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==--...

CVE-2008-1971

phShoutBox Final 1.5 and earlier only checks passwords when specified in $POST, which allows remote attackers to gain privileges by setting the 1 phadmin cookie to admin.php, or 2 in 1.4 and earlier, the ssbadmin cookie to shoutadmin.php...

CVE-2008-1971

phShoutBox Final 1.5 and earlier only checks passwords when specified in $POST, which allows remote attackers to gain privileges by setting the 1 phadmin cookie to admin.php, or 2 in 1.4 and earlier, the ssbadmin cookie to shoutadmin.php...

CVE-2008-1971

CVE-2008-1971 affects phShoutBox Final 1.5 and earlier. The vulnerability arises because authentication checks are performed only when a password is provided in $_POST, enabling remote attackers to elevate privileges by setting the phadmin cookie to admin.php (and, in 1.4 and earlier, the ssbadmi...

phshoutbox-cookie.txt

--==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...

PhShoutBox &lt;= 1.5 (final) Insecure Cookie Handling Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==--...

PhShoutBox 1.5 - Insecure Cookie Handling

PhShoutBox 1.5 - Insecure Cookie Handling --==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==--...

PhShoutBox <= 1.5 (final) Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================ PhShoutBox = 1.5 final Insecure Cookie Handling Vulnerability ================================================================...

PhShoutBox 1.5 - Insecure Cookie Handling

--==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...