Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2007-4338

Published: 14/08/2007 Updated: 15/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Family Connections Cms

Vulnerability Summary

index.php in Ryan Haudenschilt Family Connections (FCMS) prior to 0.9 allows remote malicious users to access an arbitrary account by placing the account's name in the value of an fcms_login_id cookie. NOTE: this can be leveraged for code execution via a POST with PHP code in the content parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

haudenschilt family connections cms 0.1.1

haudenschilt family connections cms 0.1.2

haudenschilt family connections cms 0.5

haudenschilt family connections cms 0.6

haudenschilt family connections cms

Exploits

Exploit DB: Haudenschilt Family Connections 0.8 - 'index.php' Authentication Bypass
source: wwwsecurityfocuscom/bid/25276/info Haudenschilt Family Connections is prone to an authentication-bypass vulnerability Attackers can exploit this issue to gain unauthorized access This may facilitate a compromise of the application and underlying webserver; other attacks are also possible Family Connections versions prior to 0 ...

References

CWE-264http://www.securityfocus.com/bid/25276http://secunia.com/advisories/26421http://sourceforge.net/tracker/index.php?func=detail&aid=1778696&group_id=189733&atid=930513http://www.attrition.org/pipermail/vim/2007-August/001762.htmlhttp://www.attrition.org/pipermail/vim/2007-August/001768.htmlhttp://securityreason.com/securityalert/3009http://osvdb.org/39534https://exchange.xforce.ibmcloud.com/vulnerabilities/35966http://www.securityfocus.com/archive/1/476293/100/0/threadedhttp://www.securityfocus.com/archive/1/476142/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/30488/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTICVE-2024-35863CVE-2024-35910man-in-the-middleCVE-2024-35912CVE-2024-25742LFICVE-2024-32002CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook