Lucene search
MitreCVE-2007-2554HistoryMay 09, 2007 - 5:19 p.m.
CVE-2007-2554
2007-05-0917:19:00
mitre
web.nvd.nist.gov
25
ap newspower
cve-2007-2554
remote attackers
news articles
mysql
security vulnerability
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:C/A:N
AI Score
9.4
Confidence
High
EPSS
0.007
Percentile
79.6%
Associated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript.
Affected configurations
Node
associated_pressnewspowerRange≤4.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| associated_press | newspower | * | cpe:2.3:a:associated_press:newspower:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2007-2554
2007-05-09 17:00:00
nvd
nvd
CVE-2007-2554
2007-05-09 17:19:00
prion
prion
Default credentials
2007-05-09 17:19:00
openvas
openvas
MySQL / MariaDB Default Credentials (MySQL Protocol)
2012-08-23 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:C/A:N
AI Score
9.4
Confidence
High
EPSS
0.007
Percentile
79.6%
Related for CVE-2007-2554