Lucene search
HistoryMar 22, 2007 - 11:19 p.m.
CVE-2007-1603
cve-2007-1603
weekly drawing contest
authentication bypass
database insertion
security vulnerability
6.7 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
76.4%
admin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass authentication, and insert new contest information into a database, via a direct POST request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| weekly_drawing_contest:weekly_drawing_contest | weekly drawing contest | eq | 0.0.1 |
Related
prion
prion
Authentication flaw
2007-03-22 23:19:00
cvelist
cvelist
CVE-2007-1603
2007-03-22 23:00:00
securityvulns
securityvulns
6.7 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
76.4%
Related for CVE-2007-1603