Searching phpgb software vulnerabilities

savesettings.php in phpGB 1.20 and earlier does

savesettingsphp | phpGB |

savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php.


SQL injection vulnerability in login.php for ph

vulnerability | injection | loginphp | phpGB | SQL |

SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.


Software vulnerabilities results 1 to 3 of 3     
Page: 1