PT-2007-6165 · Adam Scheinberg · Adam Scheinberg Flip

Undefined1 · Publicado 2007-09-24 · Atualizado 2017-09-29 · CVE-2007-5062

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adam Scheinberg Flip versions 3.0 and earlier

Description The issue allows remote attackers to create administrative accounts. This is achieved via the un parameter in a "register" action in the account.php file.

Recommendations For Adam Scheinberg Flip versions 3.0 and earlier, consider restricting access to the account.php file until a patch is available. As a temporary workaround, avoid using the un parameter in the register action to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5062

Produtos afetados

Adam Scheinberg Flip

Referências · 5

• 🔥 https://exploit-db.com/exploits/4435 · Exploit
• 🔥 http://securityfocus.com/bid/25746 · Exploit
• http://osvdb.org/41904 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5062 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36709 · Nota