Unscored severity · published Oct 11, 2007
CVE-2007-5374
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the…
–
CVSS
2.2%
EPSS
No
On KEV
Description
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Lightblog · Lightblog
8.4.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5374
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5374
secunia.com
http://secunia.com/advisories/27164
www.securityfocus.com
http://www.securityfocus.com/bid/25990
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/37050
www.exploit-db.com
https://www.exploit-db.com/exploits/4505
More from Lightblog
–
CVE-2008-0632
Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension,…