Design/Logic Flaw

2008-12-1901:52:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

72.0%

JSON

PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors.

CPENameOperatorVersion
phparanoideq0.2
phparanoidle0.3
phparanoideq0.1

Name	Operator	Version
phparanoid	eq	0.2
phparanoid	le	0.3
phparanoid	eq	0.1

References

secunia.com/advisories/28847

sourceforge.net/project/shownotes.php?release_id=575358

exchange.xforce.ibmcloud.com/vulnerabilities/40516