CVE-2007-5374 cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
MediumCVSS 6.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lightblog | = 8.4.1.1 | No fix listed |
References
- 27164 third-party-advisory
- 25990 vdb-entry
- lightblog-cpmemberedit-privilege-escalation(37050) vdb-entry
- 4505 exploit