Lucene search
HistoryApr 25, 2007 - 4:19 p.m.
CVE-2007-2249
phorum
control center
cve-2007-2249
user privileges
security vulnerability
7.3 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.9%
include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST parameter or (2) userdata array.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phorum:phorum | phorum | le | 5.1.20 |
References
7.3 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.9%
Related for CVE-2007-2249