NVD

Id
13408  
Name
CVE-2010-1916  
Description
The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in Serendipity 1.5.2 and earlier, allows remote attackers to bypass intended access restrictions and modify the configuration of arbitrary plugins via (1) crafted backend_config_secret_key_location and backend_config_hash parameters that are used in a SHA1 hash of a shared secret that can be known or externally influenced, which are not properly handled by the "Deprecated config passing" feature; or (2) crafted backend_data and backend_data[key_location] variables, which are not properly handled by the xinha_read_passed_data function. NOTE: this can be leveraged to upload and possibly execute arbitrary files via config.inc.php in the ImageManager plugin.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-05-12  
Modified Date
2010-06-13  
Seq
2010-1916  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74189 13408 CVE-2010-1916 FEDORA-2010-9320  View
74190 13408 CVE-2010-1916 http://trac.xinha.org/ticket/1518  View
74191 13408 CVE-2010-1916 http://www.php-security.org/2010/05/10/mops-2010-019-serendipity-wysiwyg-editor-plugin-configuration-injection-vulnerability/index.html  View
74192 13408 CVE-2010-1916 http://www.php-security.org/2010/05/10/mops-2010-020-xinha-wysiwyg-plugin-configuration-injection-vulnerability/index.html  View
74193 13408 CVE-2010-1916 40033  View
74194 13408 CVE-2010-1916 ADV-2010-1401  View
74195 13408 CVE-2010-1916 https://bugzilla.redhat.com/show_bug.cgi?id=591701  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39687 JVNDB-2010-005472 Serendipity で使用されている Xinha WYSIWYG エディタにおけるアクセス制限を回避される脆弱性 Serendipity で使用されている Xinha WYSIWYG エディタの動的コンフィグレーション機能は、以下の不備があるため、アクセス制限を回避される、および任意のプラグインの設定を変更される脆弱性が存在します。 CVE-2010-1916 44496 CVE-2010-1916 13408 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005472.html 2010-05-12 2012-12-20 View