UBUNTU-CVE-2007-5109
Dashboard / Vulnerabilities / UBUNTU-CVE-2007-5109
Summary:
Details: Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.
References: https://ubuntu.com/security/CVE-2007-5109, https://www.cve.org/CVERecord?id=CVE-2007-5109
Affected packages
Package
Name: flatnuke
Purl: pkg:deb/ubuntu/flatnuke?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
2.7.2-0ubuntu2
2.7.2-0ubuntu3
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
