Cosign

cosign

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Cosign

cosign

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-2233 1Cosign 1Cosign Apr 23, 2026 Apr 25, 2007 N/A· v4 N/A· v3 6.5 MEDIUM· v2 cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR (\r) sequences in the service parameter to inject LOGIN and REGISTER co...Show more cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR (\r) sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username.Show less
CVE-2007-2232 1Cosign 1Cosign Apr 23, 2026 Apr 25, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r) sequences in the cosign cookie parameter.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2007-2233

1Cosign

Apr 23, 2026

Apr 25, 2007

N/A· v4

N/A· v3

6.5 MEDIUM· v2

cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR (\r) sequences in the service parameter to inject LOGIN and REGISTER co...Show more

CVE-2007-2232

1Cosign

Apr 23, 2026

Apr 25, 2007

N/A· v4

N/A· v3

7.5 HIGH· v2

The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r) sequences in the cosign cookie parameter.