NVD

Id
52489  
Name
CVE-2007-0261  
Description
snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password via the changeup task, and by uploading PHP code via the imagefile parameter.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-01-16  
Modified Date
2011-03-07  
Seq
2007-0261  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
265268 52489 CVE-2007-0261 3116  View
265269 52489 CVE-2007-0261 22025  View
265270 52489 CVE-2007-0261 snews-image-file-upload(31535)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56257 JVNDB-2007-004949 sNews の snews.php における許可されていない管理者操作を実行される脆弱性 sNews の snews.php は、認証が失敗している際、適切に終了しないため、許可されていない管理者操作を実行される脆弱性が存在します。 CVE-2007-0261 23616 CVE-2007-0261 52489 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004949.html 2007-01-16 2012-12-20 View