1. CVE-Search
  2. CVE-2007-1043
ID CVE-2007-1043
Summary Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to (1) update.php and (2) config.php.
References
Vulnerable Configurations
  • cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*
    cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:tru64:5.1b_pk2_bl22:*:*:*:*:*:*:*
    cpe:2.3:o:hp:tru64:5.1b_pk2_bl22:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:os2:*:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:os2:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
  • cpe:2.3:o:santa_cruz_operation:sco_unix:*:*:*:*:*:*:*:*
    cpe:2.3:o:santa_cruz_operation:sco_unix:*:*:*:*:*:*:*:*
  • cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*
    cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*
  • cpe:2.3:o:windriver:bsdos:*:*:*:*:*:*:*:*
    cpe:2.3:o:windriver:bsdos:*:*:*:*:*:*:*:*
  • cpe:2.3:a:ezboo:webstats:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:ezboo:webstats:3.0.3:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 16-10-2018 - 16:36)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 22590
bugtraq 20070215 Ezboo webstats acces to sensitive files
misc http://forums.avenir-geopolitique.net/viewtopic.php?t=2674
osvdb 34181
sreason 2275
xf ezboo-update-unauthorized-access(32563)
Last major update 16-10-2018 - 16:36
Published 21-02-2007 - 17:28
Last modified 16-10-2018 - 16:36
Back to Top