Filtered by vendor Rens Rikkerink Subscriptions
Filtered by product Fungamez Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2009-1489 1 Rens Rikkerink 1 Fungamez 2024-11-21 N/A
includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter.
CVE-2009-1488 1 Rens Rikkerink 1 Fungamez 2024-11-21 N/A
Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to index.php.
CVE-2009-1487 1 Rens Rikkerink 1 Fungamez 2024-11-21 N/A
SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the login_user (aka username) parameter. NOTE: some of these details are obtained from third party information.