EUVD-2006-7074

Malware in sbrugna...

EUVD-2009-1228

Malware in sbrugna...

Authentication flaw

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter...

CVE-2009-1229

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter...

Sql injection

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter...

CVE-2009-1229

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter...

Directory traversal

Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbitrary files via a .. dot dot in the user cookie parameter...

CVE-2009-0722

CVE-2009-0722 affects Potato News 1.0.0. A directory traversal vulnerability in admin.php allows remote attackers to include and execute arbitrary files via .. in the user cookie parameter. This results in partial impact to confidentiality, integrity, and availability (CVSS 2.0 base score 7.5). N...