CVE-2008-7172

Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/29848	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/43225
https://www.exploit-db.com/exploits/5873
http://www.securityfocus.com/bid/29848	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/43225
https://www.exploit-db.com/exploits/5873

Configurations

Configuration 1 (hide)

cpe:2.3:a:yanick_bourbeau:lightweight_news_portal:1.0b:*:*:*:*:*:*:*

History

21 Nov 2024, 00:58

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/bid/29848 - Exploit~~	() http://www.securityfocus.com/bid/29848 - Exploit
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/43225 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/43225 -
References	~~() https://www.exploit-db.com/exploits/5873 -~~	() https://www.exploit-db.com/exploits/5873 -

Information

Published : 2009-09-08 10:30

Updated : 2024-11-21 00:58

NVD link : CVE-2008-7172

Mitre link : CVE-2008-7172

CVE.ORG link : CVE-2008-7172

JSON object : View

Products Affected

yanick_bourbeau

lightweight_news_portal

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2008-7172", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-09-08T10:30:01.500", "references": [{"url": "http://www.securityfocus.com/bid/29848", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43225", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/5873", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/29848", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43225", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/5873", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions."}, {"lang": "es", "value": "Lightweight news portal (LNP) v1.0b no restringe apropiadamente el acceso a la funcionalidad del administrador, lo que permite a los atacantes remotos obtener privilegios de administrados a trav\u00e9s de peticiones directas a admin.php con las acciones (1) potd_delete, (2) potd, (3) vote_update, (4) vote, o (5) modifynews."}], "lastModified": "2024-11-21T00:58:27.097", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:yanick_bourbeau:lightweight_news_portal:1.0b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6458295E-43DC-4643-ABB8-4E381CBCD6B7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}