PT-2007-1293 · Bloggit · Bloggit

Federico Fazzi · Publicado 2007-02-15 · Atualizado 2018-10-16 · CVE-2006-7014

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BloggIT versions 1.01 and earlier

Description The issue arises from improper user session establishment in the admin.php file, allowing remote attackers to gain privileges through a direct request.

Recommendations For BloggIT versions 1.01 and earlier, consider restricting access to the admin.php file until a proper fix is available. As a temporary workaround, ensure that all user sessions are properly validated and established to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-7014

Produtos afetados

Bloggit

Referências · 7

• 🔥 http://securitytracker.com/id?1016246 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7014 · Nota de Segurança
• http://securityfocus.com/archive/1/436259/30/4620/threaded · Nota
• http://secunia.com/advisories/20499 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/2210 · Nota
• http://securityreason.com/securityalert/2255 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27011 · Nota