CVE-2007-5032 - Vulnerability Details

Vendors	Products
Francisco Burzi	Php-nuke

Link	Providers
http://osvdb.org/42521
http://securityreason.com/securityalert/3157
http://www.securityfocus.com/archive/1/480107/100/0/threaded

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-09-20T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20070920 PHP-Nuke add admin ALL Versions", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/480107/100/0/threaded"}, {"name": "3157", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3157"}, {"name": "42521", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/42521"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-5032", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20070920 PHP-Nuke add admin ALL Versions", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/480107/100/0/threaded"}, {"name": "3157", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3157"}, {"name": "42521", "refsource": "OSVDB", "url": "http://osvdb.org/42521"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:17:28.144Z"}, "title": "CVE Program Container", "references": [{"name": "20070920 PHP-Nuke add admin ALL Versions", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/480107/100/0/threaded"}, {"name": "3157", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3157"}, {"name": "42521", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/42521"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5032", "datePublished": "2007-09-21T18:00:00", "dateReserved": "2007-09-21T00:00:00", "dateUpdated": "2024-08-07T15:17:28.144Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2007-09-20T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-10-15T20:57:01 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

name : 20070920 PHP-Nuke add admin ALL Versions (string)

tags : [ »

0 : mailing-list (string)

1 : x_refsource_BUGTRAQ (string)

]

url : http://www.securityfocus.com/archive/1/480107/100/0/threaded (string)

}

1 : { »

name : 3157 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SREASON (string)

]

url : http://securityreason.com/securityalert/3157 (string)

}

2 : { »

name : 42521 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_OSVDB (string)

]

url : http://osvdb.org/42521 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2007-5032 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 20070920 PHP-Nuke add admin ALL Versions (string)

refsource : BUGTRAQ (string)

url : http://www.securityfocus.com/archive/1/480107/100/0/threaded (string)

}

1 : { »

name : 3157 (string)

refsource : SREASON (string)

url : http://securityreason.com/securityalert/3157 (string)

}

2 : { »

name : 42521 (string)

refsource : OSVDB (string)

url : http://osvdb.org/42521 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-07T15:17:28.144Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 20070920 PHP-Nuke add admin ALL Versions (string)

tags : [ »

0 : mailing-list (string)

1 : x_refsource_BUGTRAQ (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/archive/1/480107/100/0/threaded (string)

}

1 : { »

name : 3157 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SREASON (string)

2 : x_transferred (string)

]

url : http://securityreason.com/securityalert/3157 (string)

}

2 : { »

name : 42521 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_OSVDB (string)

2 : x_transferred (string)

]

url : http://osvdb.org/42521 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2007-5032 (string)

datePublished : 2007-09-21T18:00:00 (string)

dateReserved : 2007-09-21T00:00:00 (string)

dateUpdated : 2024-08-07T15:17:28.144Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "F37952F9-48B7-4351-9246-D458A88C7A76", "versionEndIncluding": "1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "72E46742-6EAC-4809-AA10-D2FA8E2A82AE", "versionEndIncluding": "2.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "76035A70-5EB9-4954-B041-DE85F363285B", "versionEndIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "34ED9B82-798A-460C-AA92-9E1D6150D413", "versionEndIncluding": "4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "E8E5D5CA-560A-41CF-B7AA-1B5F31983D2F", "versionEndIncluding": "4.0.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "BE978AE4-CE24-44EE-9AFB-1EDC5151FA62", "versionEndIncluding": "4.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "71422E07-4FC3-4F67-9B29-9CC1553B9E0D", "versionEndIncluding": "4.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "8F6ADED9-7083-4F7E-B62B-18EC061BB40E", "versionEndIncluding": "4.4.1a", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "4349166E-BF46-4709-9926-2252EB9DD26F", "versionEndIncluding": "5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "0523431B-D1FA-4377-B941-957FC9E0BE07", "versionEndIncluding": "5.0.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "C88838C7-E15A-41FD-A146-AC3FE42DAA6A", "versionEndIncluding": "5.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "550DED26-19FF-4B27-89A6-1742110AE3A4", "versionEndIncluding": "5.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "66BF7791-CE60-4184-93C4-BFC1C1DD49C9", "versionEndIncluding": "5.2a", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "2E111DE9-5C94-4403-88F4-5FD189050CD4", "versionEndIncluding": "5.3.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "3187C8DA-3B9E-40FC-9A6A-B66396336537", "versionEndIncluding": "5.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "570C450F-F302-4E7D-9300-793B942C4D86", "versionEndIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "07DFE604-4E5B-4443-AC2B-8ED6F262AB39", "versionEndIncluding": "5.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "8372E6DB-093F-4947-BD35-1D9D982C7305", "versionEndIncluding": "6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F0C3371-BA62-4A32-8CF5-6F0BE63E72C5", "versionEndIncluding": "6.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD3EB69E-53A1-41E7-AA2C-5274F0F2BD4C", "versionEndIncluding": "6.5_beta1", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "07C9A823-709A-4E49-A33F-72132557CF73", "versionEndIncluding": "6.5_final", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "D842D8D9-1DA9-4A0D-8201-C733D748B7DF", "versionEndIncluding": "6.5_rc1", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "E1BF9334-D80D-4537-925B-170626787E08", "versionEndIncluding": "6.5_rc2", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "E00C1922-3D1B-4AC1-BE0E-F22416587111", "versionEndIncluding": "6.5_rc3", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "128CF248-8805-4281-9994-3F332B44FD08", "versionEndIncluding": "6.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "96959EB7-60C6-4C49-A877-C2A45DB7CCF0", "versionEndIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "FEDD895B-3A4A-40FA-ADB3-102E4BCCD45B", "versionEndIncluding": "6.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "CBC3C201-3B58-46A1-A718-C45E083D295A", "versionEndIncluding": "6.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "079C82B8-699C-424A-B484-4C1A37220EE6", "versionEndIncluding": "7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D606914-A3D8-4D55-BCD7-BA0EF83D00D5", "versionEndIncluding": "7.0_final", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "C28F3986-FB87-4441-B79D-6E9BF69BC940", "versionEndIncluding": "7.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "8EB00FB9-8366-478C-8709-83DFB49D5015", "versionEndIncluding": "7.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "C29A320E-B6EA-4E8F-85CE-737322283FC1", "versionEndIncluding": "7.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C26871D-F263-43A4-9DB5-507B4DC59C86", "versionEndIncluding": "7.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "DCDC861D-BCEF-43FA-ABDD-1A48880B57CA", "versionEndIncluding": "7.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "68A8088F-CB68-4164-BAB9-E4199E35AC46", "versionEndIncluding": "7.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "7275CB11-45FA-44F7-9291-8625CE45C44F", "versionEndIncluding": "7.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "92A23537-F479-48D1-BA44-5A3DAFA39B0E", "versionEndIncluding": "7.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "4F0A0E52-7B9C-42B3-9B24-5E4A59D8E4CB", "versionEndIncluding": "7.8_patched_3.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "41D78B64-55E8-4D61-8D22-D565CD20B19F", "versionEndIncluding": "7.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "268BAB8C-D5FF-48AB-8599-EA00C07AFAEE", "versionEndIncluding": "8.0_final", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters."}, {"lang": "es", "value": "Falsificaci\u00f3n de petici\u00f3n en sitios cruzados (CSRF) en admin.php de Francisco Burzi PHP-Nuke permite a atacantes remotos a\u00f1adir cuentas administrativas mediante una acci\u00f3n AddAuthor con par\u00e1metros add_name y add_radminsuper modificados."}], "id": "CVE-2007-5032", "lastModified": "2024-11-21T00:36:59.090", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-09-21T19:17:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/42521"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3157"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/480107/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/42521"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/3157"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/480107/100/0/threaded"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »