Lucene search
HistoryFeb 07, 2007 - 11:28 a.m.
CVE-2007-0806
cve
2007
0806
les news
authentication bypass
administrative access
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.9%
Les News 2.2 allows remote attackers to bypass authentication and gain administrative access via a direct request for adminews/index_fr.php3, and possibly the adminews index documents for other localizations.
Affected configurations
Node
les_newsles_newsMatch2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| les_news:les_news | les news | eq | 2.2 |
Related
cvelist
cvelist
CVE-2007-0806
2007-02-07 11:00:00
nvd
nvd
CVE-2007-0806
2007-02-07 11:28:00
prion
prion
Authentication flaw
2007-02-07 11:28:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.9%
Related for CVE-2007-0806