CVE-2007-4157 PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing the authentication cookie only requires the password hash, not the cleartext version.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpblogger php-blogger | = 2.2.7 | No fix listed |
References
- forcehacker.com
- 38706 vdb-entry
- 38707 vdb-entry
- 26262 third-party-advisory
- 2957 third-party-advisory
- 20070728 PHPBlogger cookie privilege escalation mailing-list