CVE

Id
27587  
CVE No.
CVE-2007-4230  
Status
Candidate  
Description
** DISPUTED ** BellaBiblio allows remote attackers to gain administrative privileges via a bellabiblio cookie with the value "administrator." NOTE: this issue is disputed by CVE and multiple third parties because the cookie value must be an MD5 hash.  
Phase
Assigned (20070808)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
283926 27587 CVE-2007-4230 BUGTRAQ:20070730 BellaBiblio Admin Login Bypass  View
283927 27587 CVE-2007-4230 URL:http://www.securityfocus.com/archive/1/archive/1/475103/100/0/threaded  View
283928 27587 CVE-2007-4230 VIM:20070731 WTF: BellaBiblio Admin Login Bypass  View
283929 27587 CVE-2007-4230 URL:http://www.attrition.org/pipermail/vim/2007-July/001733.html  View
283930 27587 CVE-2007-4230 VIM:20070731 WTF: BellaBiblio Admin Login Bypass  View
283931 27587 CVE-2007-4230 URL:http://www.attrition.org/pipermail/vim/2007-July/001736.html  View
283932 27587 CVE-2007-4230 VIM:20070731 WTF: BellaBiblio Admin Login Bypass  View
283933 27587 CVE-2007-4230 URL:http://www.attrition.org/pipermail/vim/2007-July/001745.html  View
283934 27587 CVE-2007-4230 BID:25140  View
283935 27587 CVE-2007-4230 URL:http://www.securityfocus.com/bid/25140  View
283936 27587 CVE-2007-4230 OSVDB:39032  View
283937 27587 CVE-2007-4230 URL:http://osvdb.org/39032  View
283938 27587 CVE-2007-4230 SREASON:2991  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53782 JVNDB-2007-002474 Andreas Robertz PHPNews の admin/inc/change_action.php における PHP リモートファイルインクルージョンの脆弱性 Andreas Robertz PHPNews の admin/inc/change_action.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-4232 27587 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002474.html  View