CVE

Id
28417  
CVE No.
CVE-2007-5060  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password_ and rpassword_ parameters, possibly related to timestamp values.  
Phase
Assigned (20070924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295314 28417 CVE-2007-5060 BUGTRAQ:20070922 xcms all version arbitrary code execution  View
295315 28417 CVE-2007-5060 URL:http://www.securityfocus.com/archive/1/archive/1/480326/100/0/threaded  View
295316 28417 CVE-2007-5060 BID:25771  View
295317 28417 CVE-2007-5060 URL:http://www.securityfocus.com/bid/25771  View
295318 28417 CVE-2007-5060 SECUNIA:26941  View
295319 28417 CVE-2007-5060 URL:http://secunia.com/advisories/26941  View
295320 28417 CVE-2007-5060 SREASON:3165  View
295321 28417 CVE-2007-5060 URL:http://securityreason.com/securityalert/3165  View
295322 28417 CVE-2007-5060 XF:xcms-cpass-security-bypass(36755)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53988 JVNDB-2007-002680 Adam Scheinberg Flip の account.php における管理者アカウントを作成される脆弱性 Adam Scheinberg Flip の account.php には、管理者アカウントを作成される脆弱性が存在します。 CVE-2007-5062 28417 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002680.html  View