NVD

Id
56369  
Name
CVE-2007-4240  
Description
The check_logout function in class/auth.php in Help Center Live (hcl) 2.1.3a sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to delete administrative users and have other unspecified impact via certain requests to (1) admin/departments.php, (2) admin/operators.php, and other unspecified scripts. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-08  
Modified Date
2008-11-15  
Seq
2007-4240  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
287090 56369 CVE-2007-4240 25225  View
287091 56369 CVE-2007-4240 helpcenterlive-http-security-bypass(35833)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55554 JVNDB-2007-004246 hcl の check_logout 関数における管理ユーザを削除される脆弱性 Help Center Live (hcl) の class/auth.php の check_logout 関数は、管理資格情報が存在しない際、Web ブラウザを終了せずにリダイレクトを送信するため、管理ユーザを削除されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2007-4240 27595 CVE-2007-4240 56369 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004246.html 2007-08-08 2012-09-25 View