PT-2007-6028 · Invision Power · Invision Power Board

Publicado 2007-09-17 · Atualizado 2017-07-29 · CVE-2007-4914

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Invision Power Board versions 2.3.1 before 20070912

Description: The issue allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form. This is related to certain PHP classes in the payment gateways directory, specifically class gw 2checkout.php, class gw authorizenet.php, class gw nochex.php, class gw paypal.php, and class gw safshop.php.

Recommendations: For Invision Power Board version 2.3.1 before 20070912, update to a version released after 20070912 to resolve the issue. As a temporary workaround, consider restricting access to the payment form and related PHP classes in the sources/classes/paymentgateways/ directory to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-4914

Produtos afetados

Invision Power Board

Referências · 12

• http://osvdb.org/41319 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4914 · Nota de Segurança
• http://osvdb.org/41323 · Nota
• http://forums.invisionpower.com/index.php?showtopic=237075 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4914 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36590 · Nota
• http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870 · Correção
• http://secunia.com/advisories/26788 · Aviso do Fabricante
• http://osvdb.org/41320 · Nota
• http://osvdb.org/41322 · Nota
• http://osvdb.org/41321 · Nota
• http://securityfocus.com/bid/25656 · Nota