Lucene search

[email protected]CVE-2008-6774

HistoryApr 29, 2009 - 6:30 p.m.

CVE-2008-6774

2009-04-2918:30:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2008-6774

internettoolbar

yourplace

security vulnerability

bypassing restrictions

invalid username

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.1%

JSON

internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote attackers to bypass intended restrictions and edit toolbar settings via an invalid username. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

peterselieyourplaceRange≤1.0.2

peterselieyourplaceMatch1.0

peterselieyourplaceMatch1.0.1

CPENameOperatorVersion
peterselie:yourplacepeterselie yourplacele1.0.2
peterselie:yourplacepeterselie yourplaceeq1.0
peterselie:yourplacepeterselie yourplaceeq1.0.1

CPE	Name	Operator	Version
peterselie:yourplace	peterselie yourplace	le	1.0.2
peterselie:yourplace	peterselie yourplace	eq	1.0
peterselie:yourplace	peterselie yourplace	eq	1.0.1

References

secunia.com/advisories/33272

exchange.xforce.ibmcloud.com/vulnerabilities/47566

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.1%

JSON

Related for CVE-2008-6774

nvd1 prion1 cvelist1