CVE-2009-4872

CVE-2009-4872 affects Logoshows BBS 2.0, specifically globepersonnel_login.asp. The vulnerability is multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL via the username or password fields. The connected records confirm the affected component/file and the underlying ...

CVE-2009-4871

CVE-2009-4871 concerns Logoshows BBS 2.0. The flaw is an SQL injection in globepersonnel_forum.asp exploitable via the forumid parameter, potentially allowing remote attackers to execute arbitrary SQL commands. Affected product: Logoshows BBS 2.0 (web interface, globepersonnel_forum.asp). Underly...

CVE-2009-4546

The CVE-2009-4546 entry affects Logoshows BBS 2.0, specifically the globepersonnel_login.asp authentication page. The vulnerability allows remote attackers to bypass authentication and gain administrative access by manipulating cookies (pb_username and level). This corresponds to a cookie-based a...

CVE-2009-4545

Affected software : Logoshows BBS 2.0. Vulnerability : Insufficient access control allows remote attackers to download the database via a direct request to database/globepersonnel.mdb, exposing sensitive information stored under the web root. Root cause : Inadequate access restrictions for a file...