← Back

Jemjabella

jemjabella

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Bellabook
bellabook
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-4416
1Jemjabella
1Bellabook
Apr 23, 2026
Aug 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
captcha.php in BellaBook (aka BellaBuffs) allows remote attackers to obtain administrative privileges by sending the admin's username (admin_name) in a pheap_login cookie. NOTE: the vendor disputes this vulnerability be...Show more
captcha.php in BellaBook (aka BellaBuffs) allows remote attackers to obtain administrative privileges by sending the admin's username (admin_name) in a pheap_login cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the admin_pass and secret variables, in addition to the admin_name; and because the exploit code is designed for an unrelated applicationShow less