PT-2007-5795 · Xgb · Xgb

Darkfuneral · Publicado 2007-08-31 · Atualizado 2017-09-29 · CVE-2007-4637

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions xGB version 2.0

Description The issue concerns a lack of authentication requirement for an admin edit action in the xGB.php file. This allows remote attackers to make unspecified changes.

Recommendations For xGB version 2.0, ensure proper authentication mechanisms are implemented for admin edit actions to prevent unauthorized changes.

Exploit

Correção

Identificadores relacionados

CVE-2007-4637

Produtos afetados

Xgb

Referências · 3

• 🔥 https://exploit-db.com/exploits/4336 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4637 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4637 · Nota de Segurança