EUVD-2020-29376

Malware in sbrugna...

EUVD-2008-4471

Malware in sbrugna...

CVE-2020-8510

An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en user+perms+lang, one can login as any user without a password...

Default credentials

An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en user+perms+lang, one can login as any user without a password...

CVE-2020-8510: Improper Authentication

An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en user+perms+lang, one can login as any user without a password...

PT-2020-20187

Name of the Vulnerable Software and Affected Versions phpABook version 0.9 Intermediate Description An issue allows login as any user without a password by setting a specific userInfo cookie value on the login page. The value admin+1+en representing user+perms+lang can be used to exploit this...

Directory traversal

Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the userInfo cookie...

CVE-2008-4490

Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the userInfo cookie...

CVE-2008-4490: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the userInfo cookie...