Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-5093
cve-2010-5093
member_profileform
security vulnerability
silverstripe 2.3.x
account hijacking
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.4%
Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address (ID) of another user.
Affected configurations
Node
silverstripesilverstripeMatch2.3.0
ORsilverstripesilverstripeMatch2.3.0rc1
ORsilverstripesilverstripeMatch2.3.0rc2
ORsilverstripesilverstripeMatch2.3.0rc3
ORsilverstripesilverstripeMatch2.3.1
ORsilverstripesilverstripeMatch2.3.1rc1
ORsilverstripesilverstripeMatch2.3.1rc2
ORsilverstripesilverstripeMatch2.3.2
ORsilverstripesilverstripeMatch2.3.3
ORsilverstripesilverstripeMatch2.3.4
ORsilverstripesilverstripeMatch2.3.5
ORsilverstripesilverstripeMatch2.3.6
Related
prion
prion
Code injection
2012-08-26 18:55:00
cvelist
cvelist
CVE-2010-5093
2022-10-03 16:21:02
nvd
nvd
CVE-2010-5093
2012-08-26 18:55:01
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.4%
Related for CVE-2010-5093