Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-4007
sapid cms
vulnerabilities
authorization
user registration
nvd
cve-2005-4007
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.5%
Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving (1) mvc/controller/user_request_analysis.inc.php and (2) usr/xml/ddc/authorization.xml.
Affected configurations
Node
redgraphicsapid_cmsRange≤1.2.3.02
ORredgraphicsapid_cmsMatch1.2.3
ORredgraphicsapid_cmsMatch1.2.3rc2
ORredgraphicsapid_cmsMatch1.2.3rc3
ORredgraphicsapid_cmsMatch1.2.3rc5
ORredgraphicsapid_cmsMatch1.2.3stable
| CPE | Name | Operator | Version |
|---|---|---|---|
| redgraphic:sapid_cms | redgraphic sapid cms | le | 1.2.3.02 |
| redgraphic:sapid_cms | redgraphic sapid cms | eq | 1.2.3 |
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.5%
Related for CVE-2005-4007