Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2009-0461
Disclosure Date: February 10, 2009 (last updated October 04, 2023)
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.
0
Attacker Value
Unknown
CVE-2009-0459
Disclosure Date: February 10, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field). NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2009-0458
Disclosure Date: February 10, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field). NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2009-0460
Disclosure Date: February 10, 2009 (last updated October 04, 2023)
Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.
0
