CVE-2009-1739

PAD Site Scripts 3.6 is vulnerable to an authentication bypass: remote attackers can set the authuser cookie parameter to a valid username and gain privileges as other users, including administrative rights. The vulnerability arises from how the authuser value is trusted for authentication, enabl...

CVE-2009-1941

CVE-2009-1941 affects PAD Site Scripts 3.6. The vulnerability arises from storing sensitive information under the web document root with insufficient access control, allowing remote attackers to download the database via a direct request for dbbackup.txt. Impact is consistent with the CVSS v2 bas...