PT-2007-1733 · Snews · Snews

Rgod · Publicado 2007-01-16 · Atualizado 2017-10-19 · CVE-2007-0261

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions sNews versions 1.5.30 and earlier

Description The issue allows remote attackers to perform unauthorized administrative actions when authentication fails. This can be demonstrated by changing an administrative password via the 'changeup task' or by uploading PHP code via the imagefile parameter.

Recommendations For sNews versions 1.5.30 and earlier, consider disabling the changeup task and restricting access to the imagefile parameter until a fix is available. Additionally, restrict administrative actions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-0261

Produtos afetados

Snews

Referências · 7

• 🔥 https://exploit-db.com/exploits/3116 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0261 · Nota de Segurança
• http://secunia.com/advisories/23746 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31535 · Nota
• http://securityfocus.com/bid/22025 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0261 · Nota
• http://osvdb.org/32817 · Nota