PT-2007-6781 · Unknown · Contentcustomizer

Published 2007-11-05 · Updated 2008-09-05 · CVE-2007-5817

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CONTENTCustomizer versions 3.1mp and earlier

Description The issue in dialog.php allows remote attackers to perform certain privileged actions via specific actions, which can be leveraged to conduct cross-site scripting (XSS) and possibly other attacks. The actions include del, delbackup, res, or ren.

Recommendations For CONTENTCustomizer versions 3.1mp and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2007-5817

Affected Products

Contentcustomizer

References · 4

• 🔥 https://exploit-db.com/exploits/30764 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5817 · Security Note
• http://securityfocus.com/bid/26437 · Note
• http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt · Note