Vulnerabilities (CVE)

Filtered by vendor Evilsentinel Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-0350 1 Evilsentinel 1 Evilsentinel 2024-02-28 7.5 HIGH N/A
admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to gain administrative privileges and make arbitrary configuration changes.
CVE-2008-0351 1 Evilsentinel 1 Evilsentinel 2024-02-28 5.0 MEDIUM N/A
admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the es_security_captcha parameter and not invoking captcha.php.