Lucene search
HistoryApr 18, 2014 - 10:14 p.m.
CVE-2013-7195
phpfox
cve-2013-7195
security
authenticated users
bypass restrictions
6.4 Medium
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
47.9%
PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended “Only Me” restrictions and “like” a publication via a request that specifies the ID for the publication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpfox:phpfox | phpfox | eq | 3.7.3 |
| phpfox:phpfox | phpfox | eq | 3.7.4 |
Related
prion
prion
Design/Logic Flaw
2014-04-18 22:14:00
seebug
seebug
PHPFox访问控制安全限制绕过漏洞
2014-04-09 00:00:00
securityvulns
securityvulns
packetstorm
packetstorm
PHPFox 3.7.5 Authorization Bypass
2014-04-05 00:00:00
6.4 Medium
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
47.9%
Related for CVE-2013-7195