11 matches found
EUVD-2008-1969
Malware in sbrugna...
PhShoutBox <= 1.5 (final) Insecure Cookie Handling Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==--...
CVE-2008-1971
phShoutBox Final 1.5 and earlier only checks passwords when specified in $POST, which allows remote attackers to gain privileges by setting the 1 phadmin cookie to admin.php, or 2 in 1.4 and earlier, the ssbadmin cookie to shoutadmin.php...
CVE-2008-1971
CVE-2008-1971 affects phShoutBox Final 1.5 and earlier. The vulnerability arises because authentication checks are performed only when a password is provided in $_POST, enabling remote attackers to elevate privileges by setting the phadmin cookie to admin.php (and, in 1.4 and earlier, the ssbadmi...
CVE-2008-1971
phShoutBox Final 1.5 and earlier only checks passwords when specified in $POST, which allows remote attackers to gain privileges by setting the 1 phadmin cookie to admin.php, or 2 in 1.4 and earlier, the ssbadmin cookie to shoutadmin.php...
CVE-2008-1971: Improper Authentication
phShoutBox Final 1.5 and earlier only checks passwords when specified in $POST, which allows remote attackers to gain privileges by setting the 1 phadmin cookie to admin.php, or 2 in 1.4 and earlier, the ssbadmin cookie to shoutadmin.php...
phshoutbox-cookie.txt
--==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...
PhShoutBox <= 1.5 (final) Insecure Cookie Handling Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==--...
PhShoutBox <= 1.5 (final) Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ================================================================ PhShoutBox = 1.5 final Insecure Cookie Handling Vulnerability ================================================================...
PhShoutBox 1.5 - Insecure Cookie Handling
--==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...
PhShoutBox 1.5 - Insecure Cookie Handling
PhShoutBox 1.5 - Insecure Cookie Handling --==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==--...