CVE-2008-6228

CVE-2008-6228 describes an authentication bypass in Pre Multi-Vendor Shopping Malls where remote attackers can gain administrative access by setting the adminname and adminid cookies to “admin.” The issue is triggered by cookie-based authentication bypass, with a CVSS2 base score of 7.5 (HIGH) an...

CVE-2008-6227

The CVE-2008-6227 entry describes a SQL injection vulnerability in the buyer_detail.php component of a Pre Multi-Vendor Shopping Malls system. The vulnerability arises via the (1) sid and (2) cid parameters, allowing remote attackers to inject arbitrary SQL commands. The underlying root cause is ...