Vulnerabilities

TI-2009-01410 CVE-2009-1489 · GHSA-5m9r-px69-w4v3

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and…

LOW 38

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02537 Published 2009-04-29 No fix listed CWE-287

TI-2009-01409 CVE-2009-1488 · GHSA-jc27-mgm6-6f8m

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote…

LOW 34

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01955 Published 2009-04-29 No fix listed CWE-22

TI-2009-01408 CVE-2009-1487 · GHSA-wcgh-r88m-cpg9

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to…

LOW 35

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the login_user (aka username) parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01024 Published 2009-04-29 No fix listed CWE-89

Vulnerabilities

Filters

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and…

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote…

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to…