VYPR

Dwins

by Netoffice

CVEs (1)

  • CVE-2008-2044May 1, 2008
    risk 0.04cvss epss 0.11

    includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true' string literal instead of the true boolean literal, which allows remote attackers to bypass authentication and execute arbitrary code by setting this variable to 1, as demonstrated by…