PT-2007-6780 · Acontent · Contentcustomizer

Published 2007-11-05 · Updated 2008-11-15 · CVE-2007-5816

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CONTENTCustomizer versions 3.1mp and earlier

Description The issue allows remote attackers to obtain sensitive author credentials. This is achieved by making a request with an editauthor action to the dialog.php endpoint, then reading the value of the newlocalpassword password input field in the HTML source of the resulting page.

Recommendations For CONTENTCustomizer versions 3.1mp and earlier, consider restricting access to the dialog.php endpoint until a fix is available. As a temporary workaround, avoid using the editauthor action in the request to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-5816

Affected Products

Contentcustomizer

References · 6

• 🔥 https://exploit-db.com/exploits/30732 · Exploit
• 🔥 http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt · Exploit
• http://secunia.com/advisories/27440 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5816 · Security Note
• http://securityfocus.com/bid/26291 · Note
• http://osvdb.org/39150 · Note