CVE-2008-6291

CVE-2008-6291 affects Acc PHP eMail 1.1, where a remote attacker can bypass authentication and gain administrative access by setting the NEWSLETTERLOGIN cookie to "admin". The vulnerability stems from insufficient server-side validation of the login cookie, enabling privilege escalation without v...

CVE-2009-4906

CVE-2009-4906 is a CSRF vulnerability affecting Acc PHP eMail 1.1 (index.php). The issue allows remote attackers to hijack administrator authentication for requests that change passwords. Connected sources provide the same description across multiple feeds; CVSS2 base score is 6.8 (Medium) with n...