NVD

Id
56463  
Name
CVE-2007-4338  
Description
index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary account by placing the account"s name in the value of an fcms_login_id cookie. NOTE: this can be leveraged for code execution via a POST with PHP code in the content parameter.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-14  
Modified Date
2010-12-29  
Seq
2007-4338  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
287608 56463 CVE-2007-4338 3009  View
287609 56463 CVE-2007-4338 http://sourceforge.net/tracker/index.php?func=detail&aid=1778696&group_id=189733&atid=930513  View
287610 56463 CVE-2007-4338 20070814 uncertain: FCMS (Family Connections) code execution  View
287611 56463 CVE-2007-4338 20070823 vendor ACK for CVE-2007-4338 (Familr Connections)  View
287612 56463 CVE-2007-4338 20070811 FCMS (Family Connections) <= 0.1.1 Remote Command Execution Exploit // www.MefistoLabs.com  View
287613 56463 CVE-2007-4338 20070813 Re: FCMS (Family Connections) <= 0.1.1 Remote Command Execution Exploit // www.MefistoLabs.com  View
287614 56463 CVE-2007-4338 25276  View
287615 56463 CVE-2007-4338 family-fcmsloginid-security-bypass(35966)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55582 JVNDB-2007-004274 Ryan Haudenschilt FCMS の index.php における任意のアカウントにアクセスされる脆弱性 Ryan Haudenschilt Family Connections (FCMS) の index.php には、任意のアカウントにアクセスされる脆弱性が存在します。 CVE-2007-4338 27693 CVE-2007-4338 56463 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004274.html 2007-08-14 2012-09-25 View