PT-2007-6781 · Unknown · Contentcustomizer

Publicado 2007-11-05 · Atualizado 2008-09-05 · CVE-2007-5817

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CONTENTCustomizer versions 3.1mp and earlier

Description The issue in dialog.php allows remote attackers to perform certain privileged actions via specific actions, which can be leveraged to conduct cross-site scripting (XSS) and possibly other attacks. The actions include del, delbackup, res, or ren.

Recommendations For CONTENTCustomizer versions 3.1mp and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-5817

Produtos afetados

Contentcustomizer

Referências · 4

• 🔥 https://exploit-db.com/exploits/30764 · Exploit
• http://securityfocus.com/bid/26437 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5817 · Nota de Segurança
• http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt · Nota