CVE

Id
27639  
CVE No.
CVE-2007-4282  
Status
Candidate  
Description
The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies the password being checked.  
Phase
Assigned (20070809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284479 27639 CVE-2007-4282 MISC:http://blog.drinsama.de/erich/en/security/2007080801-security-issue-in-serendipity.html  View
284480 27639 CVE-2007-4282 CONFIRM:http://sourceforge.net/forum/forum.php?forum_id=722867  View
284481 27639 CVE-2007-4282 CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=75065&release_id=530716  View
284482 27639 CVE-2007-4282 CONFIRM:http://blog.s9y.org/archives/178-Serendipity-1.1.4-released,-security-bug-in-entryproperties-plugin.html  View
284483 27639 CVE-2007-4282 BID:25235  View
284484 27639 CVE-2007-4282 URL:http://www.securityfocus.com/bid/25235  View
284485 27639 CVE-2007-4282 OSVDB:36534  View
284486 27639 CVE-2007-4282 URL:http://osvdb.org/36534  View
284487 27639 CVE-2007-4282 SECUNIA:26347  View
284488 27639 CVE-2007-4282 URL:http://secunia.com/advisories/26347  View
284489 27639 CVE-2007-4282 XF:serendipity-extendedprop-security-bypass(35868)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53801 JVNDB-2007-002493 Cisco MP におけるクロスサイトスクリプティングの脆弱性 Cisco Unified MeetingPlace Web Conferencing (MP) は、エラーメッセージを適切に処理しないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-4284 27639 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002493.html  View