Lucene search

K
prionPRIOn knowledge basePRION:CVE-2006-0157
HistoryJan 10, 2006 - 11:03 a.m.

Design/Logic Flaw

2006-01-1011:03:00
PRIOn knowledge base
www.prio-n.com

7.3 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.021 Low

EPSS

Percentile

88.7%

settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, then declares the new password string in the new_passwd and confirm_passwd parameters.

CPENameOperatorVersion
magic_news_pluseq1.0.3

7.3 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.021 Low

EPSS

Percentile

88.7%

Related for PRION:CVE-2006-0157