PT-2007-6780 · Acontent · Contentcustomizer

Publicado 2007-11-05 · Atualizado 2008-11-15 · CVE-2007-5816

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CONTENTCustomizer versions 3.1mp and earlier

Description The issue allows remote attackers to obtain sensitive author credentials. This is achieved by making a request with an editauthor action to the dialog.php endpoint, then reading the value of the newlocalpassword password input field in the HTML source of the resulting page.

Recommendations For CONTENTCustomizer versions 3.1mp and earlier, consider restricting access to the dialog.php endpoint until a fix is available. As a temporary workaround, avoid using the editauthor action in the request to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-5816

Produtos afetados

Contentcustomizer

Referências · 6

• 🔥 https://exploit-db.com/exploits/30732 · Exploit
• 🔥 http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt · Exploit
• http://secunia.com/advisories/27440 · Aviso do Fabricante
• http://securityfocus.com/bid/26291 · Nota
• http://osvdb.org/39150 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5816 · Nota de Segurança