PT-2007-2210 · Eqdkp Team · Eqdkp

Eight10 · Publicado 2007-02-06 · Atualizado 2017-10-19 · CVE-2007-0760

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EQdkp versions 1.3.1 and earlier

Description The issue allows remote attackers to read or modify account names and passwords by spoofing the HTTP Referer header, which is used for administrative request authentication.

Recommendations For EQdkp versions 1.3.1 and earlier, consider implementing proper authentication mechanisms that do not rely solely on the HTTP Referer header to verify administrative requests. As a temporary workaround, restrict access to administrative functions to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-0760

Produtos afetados

Eqdkp

Referências · 6

• 🔥 http://securityfocus.com/bid/20805 · Exploit
• 🔥 https://exploit-db.com/exploits/3252 · Exploit
• http://secunia.com/advisories/24038 · Nota
• http://osvdb.org/33112 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32152 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0760 · Nota de Segurança