2 matches found
CVE-2008-7007
CVE-2008-7007 affects Free PHP VX Guestbook 1.06. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the admin_name and admin_pass cookies to 1. The root cause is improper cookie handling that accepts these values as valid credentials, ena...
CVE-2008-7006
The CVE-2008-7006 entry affects Free PHP VX Guestbook 1.06. A vulnerability in admin/backupdb.php allows remote attackers to bypass authentication and download the database backup directly, exposing data without requiring login. The cited sources describe the issue and its impact as authenticatio...