Cicoandcico

cicoandcico

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Ccmail

ccmail

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-1904 1Cicoandcico 1Ccmail Apr 23, 2026 Apr 22, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified this_cookie cook...Show more Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified this_cookie cookie.Show less
CVE-2007-1516 1Cicoandcico 1Ccmail Apr 23, 2026 Mar 20, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functions_dir parameter.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2008-1904

1Cicoandcico

1Ccmail

Apr 23, 2026

Apr 22, 2008

N/A· v4

N/A· v3

7.5 HIGH· v2

Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified this_cookie cook...Show more

CVE-2007-1516

1Cicoandcico

1Ccmail

Apr 23, 2026

Mar 20, 2007

N/A· v4

N/A· v3

6.8 MEDIUM· v2

PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functions_dir parameter.