Lucene search
MitreCVE-2007-5374HistoryOct 11, 2007 - 10:17 a.m.
CVE-2007-5374
2007-10-1110:17:00
CWE-287
mitre
web.nvd.nist.gov
20
lightblog
8.4.1.1
privilege escalation
vulnerability
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.009
Percentile
83.0%
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
Affected configurations
Node
lightbloglightblogMatch8.4.1.1
Related
exploitdb
exploitdb
LightBlog 8.4.1.1 - Remote Code Execution
2007-10-09 00:00:00
prion
prion
Design/Logic Flaw
2007-10-11 10:17:00
cvelist
cvelist
CVE-2007-5374
2007-10-11 10:00:00
nvd
nvd
CVE-2007-5374
2007-10-11 10:17:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.009
Percentile
83.0%
Related for CVE-2007-5374