Lucene search

PRIOn knowledge basePRION:CVE-2007-2082

HistoryApr 18, 2007 - 3:19 a.m.

Code injection

2007-04-1803:19:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.7%

JSON

Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers.

CPENameOperatorVersion
myblogle0.9.8

CPE	Name	Operator	Version
	myblog	le	0.9.8

References

osvdb.org/35392

securityreason.com/securityalert/2581

www.securityfocus.com/archive/1/465873/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/33707

7.4 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for PRION:CVE-2007-2082