PT-2007-6989 · Vigile · Vigilecms

Devilauron · Publicado 2007-11-22 · Atualizado 2018-10-15 · CVE-2007-6087

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VigileCMS version 1.4

Description A cross-site request forgery issue exists, allowing remote attackers to modify the admin password by manipulating certain parameters to the changepass module in index.php.

Recommendations For VigileCMS version 1.4, consider disabling access to the changepass module in index.php until a fix is available to prevent unauthorized password changes.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2007-6087

Produtos afetados

Vigilecms

Referências · 5

• 🔥 https://exploit-db.com/exploits/4632 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38558 · Nota
• http://securityfocus.com/bid/26484 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6087 · Nota de Segurança
• http://securityfocus.com/archive/1/483907/100/0/threaded · Nota