CVE-2009-4905

CVE-2009-4905 relates to multiple cross-site request forgery (CSRF) vulnerabilities in index.php of Acc Statistics 1.1. The weaknesses allow remote attackers to hijack administrator authentication to perform changes such as (1) passwords, (2) usernames, and (3) e-mail addresses. The available con...

CVE-2008-6294

CVE-2008-6294 affects Acc Statistics 1.1, where admin/Index.php permits remote authentication bypass by setting the username_cookie cookie to "admin", enabling administrative access. The CVSS base score is 7.5 (HIGH) with network access and low complexity. No remediation details are provided in t...