Lucene search
HistoryMar 10, 2007 - 10:19 p.m.
CVE-2007-1389
cve-2007-1389
dynaliens 2.0
dynaliens 2.1
remote attackers
authentication bypass
privileged actions
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.9%
dynaliens 2.0 and 2.1 allows remote attackers to bypass authentication and perform certain privileged actions via a direct request for (1) validlien.php3 (2) supprlien.php3 (3) supprub.php3 (4) validlien.php3 (5) confsuppr.php3 (6) modiflien.php3, or (7) confmodif.php3 in admin/.
Affected configurations
Node
dynaliensdynaliensMatch2.0
ORdynaliensdynaliensMatch2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| dynaliens:dynaliens | dynaliens | eq | 2.0 |
| dynaliens:dynaliens | dynaliens | eq | 2.1 |
Related
nvd
nvd
CVE-2007-1389
2007-03-10 22:19:00
prion
prion
Authentication flaw
2007-03-10 22:19:00
cvelist
cvelist
CVE-2007-1389
2007-03-10 22:00:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.9%
Related for CVE-2007-1389