{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-07-28T00:00:00", "descriptions": [{"lang": "en", "value": "PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing the authentication cookie only requires the password hash, not the cleartext version."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://forcehacker.com/forum/viewtopic.php?t=2352"}, {"name": "26262", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/26262"}, {"name": "38707", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/38707"}, {"name": "2957", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2957"}, {"name": "38706", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/38706"}, {"name": "20070728 PHPBlogger cookie privilege escalation", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/474938/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-4157", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing the authentication cookie only requires the password hash, not the cleartext version."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://forcehacker.com/forum/viewtopic.php?t=2352", "refsource": "MISC", "url": "http://forcehacker.com/forum/viewtopic.php?t=2352"}, {"name": "26262", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26262"}, {"name": "38707", "refsource": "OSVDB", "url": "http://osvdb.org/38707"}, {"name": "2957", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2957"}, {"name": "38706", "refsource": "OSVDB", "url": "http://osvdb.org/38706"}, {"name": "20070728 PHPBlogger cookie privilege escalation", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/474938/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T14:46:39.364Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://forcehacker.com/forum/viewtopic.php?t=2352"}, {"name": "26262", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/26262"}, {"name": "38707", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/38707"}, {"name": "2957", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2957"}, {"name": "38706", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/38706"}, {"name": "20070728 PHPBlogger cookie privilege escalation", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/474938/100/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-4157", "datePublished": "2007-08-03T21:00:00", "dateReserved": "2007-08-03T00:00:00", "dateUpdated": "2024-08-07T14:46:39.364Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:phpblogger:php-blogger:2.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "6ADAC89E-D09D-45AB-B94C-DC550BF195A9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing the authentication cookie only requires the password hash, not the cleartext version."}, {"lang": "es", "value": "PHPBlogger almacena informaci\u00f3n confidencial bajo la ra\u00edz del web con control de acceso insuficiente, lo cual permite a atacantes remotos descargar una base de datos conteniendo un resumen de contrase\u00f1a de admin mediante una petici\u00f3n directa de data/pref.db.\r\nNOTA: esto puede ser f\u00e1cilmente utilizado para conseguir acceso administrativo dado que la composici\u00f3n de la cookie de autenticaci\u00f3n solamente requiere el resumen de la contrase\u00f1a, no la versi\u00f3n de texto en claro."}], "id": "CVE-2007-4157", "lastModified": "2018-10-15T21:33:40.117", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-08-03T21:17:00.000", "references": [{"source": "cve@mitre.org", "url": "http://forcehacker.com/forum/viewtopic.php?t=2352"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/38706"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/38707"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/26262"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2957"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/474938/100/0/threaded"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}