https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 29 Oct 2026 18:52:10 +0000 https://db.gcve.eu/vuln/fkie_cve-2007-2985 <p>Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator&#39;s username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php.</p> <p>Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator&#39;s username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php.</p> https://db.gcve.eu/vuln/fkie_cve-2007-2985 https://db.gcve.eu/vuln/ghsa-gjr5-xrxx-mv2c <p>Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator&#39;s username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php.</p> <p>Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator&#39;s username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php.</p> https://db.gcve.eu/vuln/ghsa-gjr5-xrxx-mv2c https://db.gcve.eu/vuln/gsd-2007-2985 gsd-2007-2985 https://db.gcve.eu/vuln/gsd-2007-2985