CVE-2009-1780

CVE-2009-1780 affects Frax.dk Php Recommend 1.3 and earlier. The issue is in the password-change flow where authentication is not required, enabling remote attackers to gain administrative privileges by submitting manipulated form_admin_user and form_admin_pass parameters. The core impact is unau...

CVE-2009-1781

CVE-2009-1781 describes a static code injection vulnerability in admin.php of Frax.dk Php Recommend 1.3 and earlier. The issue allows remote attackers to inject arbitrary PHP code into phpre_config.php through the form_aula parameter, indicating a file/configuration handling flaw in older version...

CVE-2009-1779

The CVE-2009-1779 issue affects Frax.dk Php Recommend 1.3 and earlier versions, where a remote file inclusion flaw in admin.php allows an attacker to execute arbitrary PHP code via a URL parameter named form_include_template. This is exploitable by remote attackers without authentication and resu...