CVE-2007-0261

EPSS 4.5%

snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password via the changeup task, and by uploading PHP code via the imagefile parameter.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/3116no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://osvdb.org/32817 http://secunia.com/advisories/23746 https://exchange.xforce.ibmcloud.com/vulnerabilities/31535 https://www.exploit-db.com/exploits/3116 http://www.securityfocus.com/bid/22025