CVE-2007-1949

The CVE-2007-1949 entry describes a Session fixation vulnerability in WebBlizzard CMS where an attacker can hijack user sessions by setting a PHPSESSID cookie. The connected documents confirm the flaw affects WebBlizzard CMS and exposes session integrity risk, allowing remote exploitation via coo...

CVE-2007-1950

CVE-2007-1950 describes a cross-site scripting (XSS) vulnerability in WebBlizzard CMS, specifically in the file index_cms.php where the Suchzeile parameter accepts user input without proper sanitization. This allows remote attackers to inject arbitrary web script or HTML. The available documents ...

CVE-2008-3154

CVE-2008-3154 is a SQL injection vulnerability in the WebBlizzard CMS, specifically in the index.php handling of the page parameter. The underlying issue allows remote attackers to modify the database by injecting SQL commands, with potential impact to confidentiality, integrity, and availability...