PT-2007-3423 · Myblog · Myblog

Publicado 2007-04-18 · Atualizado 2018-10-16 · CVE-2007-2081

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyBlog versions 0.9.8 and earlier

Description The issue allows remote attackers to bypass authentication requirements. This can be achieved via the admin cookie parameter to certain admin files, such as "admin/settings.php".

Recommendations For MyBlog versions 0.9.8 and earlier, consider restricting access to admin files until a patch is available. As a temporary workaround, avoid using the admin cookie parameter in sensitive areas of the application.

Exploit

Correção

Identificadores relacionados

CVE-2007-2081

Produtos afetados

Myblog

Referências · 7

• 🔥 http://securityfocus.com/bid/23521 · Exploit
• 🔥 https://exploit-db.com/exploits/29864 · Exploit
• http://securityreason.com/securityalert/2581 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2081 · Nota de Segurança
• http://securityfocus.com/archive/1/465873/100/0/threaded · Nota
• http://osvdb.org/41593 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34025 · Nota