CVE-2006-1555

CVE-2006-1555 affects VSNS Lemon 3.2.0. The vulnerability is a cookie-based authentication bypass: remote attackers can access password-protected articles by setting the vsns[topic_id] cookie to the targeted topic. Impact is authenticated-access to protected content without credentials, with netw...

CVE-2006-1554

CVE-2006-1554 concerns a cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0. The issue arises from insufficient sanitization of the name parameter in the comment-adding workflow, allowing remote attackers to inject arbitrary web scripts or HTML. The vulnerability is tied to the comment ...

CVE-2006-1553

VSNS Lemon 3.2.0 is affected by CVE-2006-1553 due to an SQL injection in functions/final_functions.php when magic_quotes_gpc is disabled. The vulnerable parameter is id, enabling remote attackers to inject arbitrary SQL commands. This is a server-side input validation flaw in the PHP code path ha...