CVE-2008-5673

PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:phparanoid:phparanoid:*:*:*:*:*:*:*:*
cpe:2.3:a:phparanoid:phparanoid:0.1:*:*:*:*:*:*:*
cpe:2.3:a:phparanoid:phparanoid:0.2:*:*:*:*:*:*:*

History

21 Nov 2024, 00:54

Type Values Removed Values Added
References () http://secunia.com/advisories/28847 - Vendor Advisory () http://secunia.com/advisories/28847 - Vendor Advisory
References () http://sourceforge.net/project/shownotes.php?release_id=575358 - Patch, Vendor Advisory () http://sourceforge.net/project/shownotes.php?release_id=575358 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/40516 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/40516 -

Information

Published : 2008-12-19 01:52

Updated : 2024-11-21 00:54


NVD link : CVE-2008-5673

Mitre link : CVE-2008-5673

CVE.ORG link : CVE-2008-5673


JSON object : View

Products Affected

phparanoid

  • phparanoid
CWE
CWE-264

Permissions, Privileges, and Access Controls