NVD

Id
57823  
Name
CVE-2007-5772  
Description
Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrators to inject arbitrary PHP code into a description.it.php file in a subdirectory of Download/ by saving a description and setting fneditmode to 1. NOTE: unauthenticated remote attackers can exploit this by leveraging a cookie manipulation issue.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-11-01  
Modified Date
2008-11-15  
Seq
2007-5772  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
295970 57823 CVE-2007-5772 4562  View
295971 57823 CVE-2007-5772 20071025 Flatnuke3 Remote Cookie Manipoulation / Privilege Escalation  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54158 JVNDB-2007-002850 Flatnuke 3 の download モジュールにおける description.it.php ファイルへ PHP コードを挿入される脆弱性 Flatnuke 3 の download モジュールには、Download/ 配下のサブディレクトリ内の description.it.php ファイルへ任意の PHP コードを挿入される脆弱性が存在します。 CVE-2007-5772 29127 CVE-2007-5772 57823 6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002850.html 2007-11-01 2012-06-26 View