CVE-2008-2020

The CVE-2008-2020 issue affects multiple CAPTCHA implementations: PHP-Nuke (versions 7.0–8.1), my123tkShop 0.9.1, phpMyBitTorrent 1.2.2, TorrentFlux 2.3, e107 0.7.11, WebZE 0.5.9, Open Media Collectors Database 1.5.0b4, and Labgab 1.1. The root cause is use of a code_bg.jpg background with PHP Im...

CVE-2008-3937

OpenDb (Open Media Collectors Database) version 1.0.6 contains multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary script/HTML via three inputs: user_id in edit action to user_admin.php, title in listings.php, and redirect_url in user_profile...

CVE-2008-3938

The Open Media Collectors Database (OpenDb) version 1.0.6 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability within the user_admin.php component. This flaw allows remote attackers to perform an update_password action to change arbitrary passwords. Exploitation details are not pro...