Lucene search
HistoryOct 18, 2007 - 10:17 p.m.
CVE-2007-5579
cve-2007-5579
pligg cms
login.php
confirmation code
vulnerability
security
nvd
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.6%
login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user’s password by calculating the confirmationcode parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pligg:pligg_cms | pligg pligg cms | eq | 9.5 |
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.6%
Related for CVE-2007-5579