PT-2007-6165 · Adam Scheinberg · Adam Scheinberg Flip

Undefined1 · Published 2007-09-24 · Updated 2017-09-29 · CVE-2007-5062

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adam Scheinberg Flip versions 3.0 and earlier

Description The issue allows remote attackers to create administrative accounts. This is achieved via the un parameter in a "register" action in the account.php file.

Recommendations For Adam Scheinberg Flip versions 3.0 and earlier, consider restricting access to the account.php file until a patch is available. As a temporary workaround, avoid using the un parameter in the register action to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5062

Affected Products

Adam Scheinberg Flip

References · 5

• 🔥 https://exploit-db.com/exploits/4435 · Exploit
• 🔥 http://securityfocus.com/bid/25746 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5062 · Security Note
• http://osvdb.org/41904 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36709 · Note