PT-2007-6728 · Agtc · Agtc-Membership System

Publicado 2007-10-31 · Atualizado 2018-10-15 · CVE-2007-5752

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AGTC-Membership System version 1.1a

Description The issue concerns the adduser.php file, which does not require authentication. This allows remote attackers to create accounts by modifying the form. For example, an attacker can create an account with admin privileges, specifically userlevel 4.

Recommendations For AGTC-Membership System version 1.1a, consider implementing authentication requirements for the adduser.php file to prevent unauthorized account creation. As a temporary workaround, restrict access to the adduser.php file until a proper authentication mechanism is in place.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-5752

Produtos afetados

Agtc-Membership System

Referências · 8

• 🔥 https://exploit-db.com/exploits/5649 · Exploit
• 🔥 https://exploit-db.com/exploits/4589 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38173 · Nota
• http://secunia.com/advisories/27430 · Aviso do Fabricante
• http://securityreason.com/securityalert/3326 · Nota
• http://securityfocus.com/bid/26255 · Nota
• http://securityfocus.com/archive/1/482919/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5752 · Nota de Segurança