CVE

Id
27618  
CVE No.
CVE-2007-4261  
Status
Candidate  
Description
EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) a file containing cleartext passwords via a direct request for OnlineViewing/data/galleries.txt, or (2) a file containing username hashes and password hashes via a direct request for OnlineViewing/configuration/config.dat/. NOTE: vector 2 can be leveraged for administrative access because authentication does not require knowledge of cleartext values, but instead uses the username hash in the ConfigLogin parameter and the password hash in the ConfigPassword parameter.  
Phase
Assigned (20070808)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284193 27618 CVE-2007-4261 BUGTRAQ:20070806 EZPhotoSales 1.9.3 Multiple Vulnerabilities  View
284194 27618 CVE-2007-4261 URL:http://www.securityfocus.com/archive/1/archive/1/475678/100/0/threaded  View
284195 27618 CVE-2007-4261 MISC:http://www.airscanner.com/security/07080601_ezphotosales.htm  View
284196 27618 CVE-2007-4261 MISC:http://www.informit.com/guides/content.asp?g=security&seqNum=267  View
284197 27618 CVE-2007-4261 MISC:http://www.informit.com/guides/content.asp?g=security&seqNum=268  View
284198 27618 CVE-2007-4261 BID:25323  View
284199 27618 CVE-2007-4261 URL:http://www.securityfocus.com/bid/25323  View
284200 27618 CVE-2007-4261 SECUNIA:26341  View
284201 27618 CVE-2007-4261 URL:http://secunia.com/advisories/26341  View
284202 27618 CVE-2007-4261 SREASON:2985  View
284203 27618 CVE-2007-4261 URL:http://securityreason.com/securityalert/2985  View
284204 27618 CVE-2007-4261 XF:ezphotosales-config-information-disclosure(35841)  View
284205 27618 CVE-2007-4261 URL:http://xforce.iss.net/xforce/xfdb/35841  View
284206 27618 CVE-2007-4261 XF:ezphotosales-galleries-info-disclosure(35840)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51920 JVNDB-2007-000583 Cisco IOS における SCP の実装においてユーザの権限を適切にチェックしない問題 Cisco IOS における Secure Copy (SCP) の実装において、ユーザの権限レベルを適切にチェックしない問題が存在します。 CVE-2007-4263 27618 8.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000583.html  View