Flexphplink 0.0.x - Authentication Bypass

Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphplink Pro Version: 0.0.7 Download: http://www.china-on-site.com/flexphplink/downloads.html Bug In \admin\usercheck.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...

Flexphpsite 0.0.1 - Authentication Bypass

Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphpsiteen Version: 0.0.1 Download: http://www.china-on-site.com/flexphpsite/downloads.html Bug In \admin\usercheck.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...

CVE-2008-3098

CVE-2008-3098 is a Cross-site scripting (XSS) flaw in fuzzylime CMS prior to 3.03 affecting admin/usercheck.php. The vulnerability allows remote attackers to inject arbitrary script via the login form's user parameter. According to the CVE notes, vendor remediation released version 3.03 on 2008-0...