2 matches found
CVE-2008-3454
CVE-2008-3454 affects JnSHosts PHP Hosting Directory 2.0. The vulnerability allows remote attackers to bypass authentication by setting the adm cookie value to 1, gaining administrative access. Exploitation is possible over a network with low complexity and no authentication required. The documen...
CVE-2008-3455
CVE-2008-3455 is a PHP remote file inclusion vulnerability affecting JnSHosts PHP Hosting Directory 2.0. The flaw allows arbitrary PHP code execution via a URL in the rd parameter of include/admin.php, enabling full compromise of affected systems (as per NVD description). The connected documents ...