EUVD-2007-0525

Malware in sbrugna...

CVE-2024-34914

php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing algorithm for its rememberkey value. This allows attackers to bruteforce to bruteforce the rememberkey value to gain access to accounts that have checked "remember me" when logging in...

CVE-2024-34914

The php-censor application (v2.1.4) is vulnerable to a Weak Hashing Algorithm (CWE-328) because the rememberKey is generated using only the MD5 hash of the login timestamp without any salt or randomness. This oversight allows attackers to brute-force the remember_key value by iterating over poten...

PHP Censor security vulnerability

PHP Censor is an open source, self-hosted, continuous integration server for PHP projects from PHP Censor Open Source. A security vulnerability exists in PHP Censor version v2.1.4, which stems from the use of a weak hash algorithm that allows an attacker to brute-force the Rememberkey value to ga...

CVE-2024-34914: Use of Weak Hash

php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing algorithm for its rememberkey value. This allows attackers to bruteforce to bruteforce the rememberkey value to gain access to accounts that have checked "remember me" when logging in...

Sql injection

SQL injection vulnerability in the isremembered function in class.login.php in Website Baker 2.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the REMEMBERKEY cookie parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-0527

SQL injection vulnerability in the isremembered function in class.login.php in Website Baker 2.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the REMEMBERKEY cookie parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-0527: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the isremembered function in class.login.php in Website Baker 2.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the REMEMBERKEY cookie parameter. NOTE: some of these details are obtained from third party information...

Website Baker REMEMBER_KEY Cookie SQL Injection

The remote host is running Website Baker, a PHP-based content management system. The installed version of Website Baker fails to validate input to the 'REMEMBERKEY' cookie before using it in 'framework/class.login.php' to construct SQL queries. Provided PHP's 'magicquotesgpc' setting is disabled,...