CVE-2007-1193 - Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown imp

CVE-2007-1193

Summary

Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors. Successful exploitation requires that "magic_quotes_gpc" is disabled.

References

http://osvdb.org/35993
http://sourceforge.net/tracker/index.php?func=detail&aid=1656000&group_id=156477&atid=799942
http://www.securityfocus.com/bid/22756
http://www.vupen.com/english/advisories/2007/0781

Vulnerable Configurations

cpe:2.3:a:orangehrm:orangehrm:2.1:alpha_4:*:*:*:*:*:*
cpe:2.3:a:orangehrm:orangehrm:2.1:alpha_4:*:*:*:*:*:*

CVSS

Base:	9.3 (as of 08-03-2011 - 02:51)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:C/I:C/A:C

refmap via4

bid	22756
confirm	http://sourceforge.net/tracker/index.php?func=detail&aid=1656000&group_id=156477&atid=799942
osvdb	35993
vupen	ADV-2007-0781

Last major update

08-03-2011 - 02:51

Published

02-03-2007 - 21:18

Last modified

08-03-2011 - 02:51