CVE-2010-4332

Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/42662
http://www.exploit-db.com/exploits/15740	Exploit
http://www.securityfocus.com/archive/1/515314/100/0/threaded
http://www.uncompiled.com/2010/12/pointter-php-content-management-system-unauthorized-privilege-escalation-cve-2010-4332/	Exploit
http://secunia.com/advisories/42662
http://www.exploit-db.com/exploits/15740	Exploit
http://www.securityfocus.com/archive/1/515314/100/0/threaded
http://www.uncompiled.com/2010/12/pointter-php-content-management-system-unauthorized-privilege-escalation-cve-2010-4332/	Exploit

Configurations

Configuration 1 (hide)

cpe:2.3:a:pangramsoft:pointter_php_content_management_system:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:20

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/42662 -~~	() http://secunia.com/advisories/42662 -
References	~~() http://www.exploit-db.com/exploits/15740 - Exploit~~	() http://www.exploit-db.com/exploits/15740 - Exploit
References	~~() http://www.securityfocus.com/archive/1/515314/100/0/threaded -~~	() http://www.securityfocus.com/archive/1/515314/100/0/threaded -
References	~~() http://www.uncompiled.com/2010/12/pointter-php-content-management-system-unauthorized-privilege-escalation-cve-2010-4332/ - Exploit~~	() http://www.uncompiled.com/2010/12/pointter-php-content-management-system-unauthorized-privilege-escalation-cve-2010-4332/ - Exploit

Information

Published : 2010-12-22 03:00

Updated : 2024-11-21 01:20

NVD link : CVE-2010-4332

Mitre link : CVE-2010-4332

CVE.ORG link : CVE-2010-4332

JSON object : View

Products Affected

pangramsoft

pointter_php_content_management_system

CWE

CWE-287

Improper Authentication

{"id": "CVE-2010-4332", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2010-12-22T03:00:03.267", "references": [{"url": "http://secunia.com/advisories/42662", "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/15740", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/515314/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.uncompiled.com/2010/12/pointter-php-content-management-system-unauthorized-privilege-escalation-cve-2010-4332/", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/42662", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.exploit-db.com/exploits/15740", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/515314/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.uncompiled.com/2010/12/pointter-php-content-management-system-unauthorized-privilege-escalation-cve-2010-4332/", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies."}, {"lang": "es", "value": "Pointter PHP Content Management System v1.0 permite a atacantes remotos evitar la autenticaci\u00f3n y obtener privilegios de administrador a trav\u00e9s de valores arbitrarios de las cookies auser y apass."}], "lastModified": "2024-11-21T01:20:43.073", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pangramsoft:pointter_php_content_management_system:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76F97AEA-5ADA-4B34-9393-51704243EDC4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}