Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2007-2082

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MyBlog的admin/settings.php中存在直接静态代码注入漏洞。远程认证管理用户可以借助内容参数，注入任意的PHP代码。

AI Predicted 8.8 Difficulty: Easy EPSS 1.15% · P64
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2007-2082

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
MyBlog 'settings.php'静态代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MyBlog的admin/settings.php中存在直接静态代码注入漏洞。远程认证管理用户可以借助内容参数，注入任意的PHP代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2007-2082

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-2082

请登录查看更多情报信息。

Vendor Advisories for CVE-2007-2082 (3)

Other References for CVE-2007-2082 (1)

Same Patch Batch · n/a · 2007-04-18 · 85 CVEs total

CVE-2007-1856 Gentoo Linux Vixie Cron 本地拒绝服务漏洞
CVE-2007-2062 VCDGear畸形CUE文件处理栈缓冲区溢出漏洞
CVE-2007-2106 Kai Content Management System 'index.php'目录遍历漏洞
CVE-2007-2107 XOOPS Rha7 Downloads模块 visit.php'SQL注入漏洞
CVE-2007-2105 Monkey CMS'admin/index.php'目录遍历漏洞
CVE-2007-2102 my little weblog'weblog.php'跨站脚本攻击漏洞
CVE-2007-2101 FAC Guestbook 'gbdb.mdb'信息泄露漏洞
CVE-2007-2100 FAC Guestbook 'Gdb.mdb'信息泄露漏洞
CVE-2007-2099 OpenConcept Back-End CMS 'php.php'跨站脚本攻击漏洞
CVE-2007-2103 my little forum 多个PHP远程文件包含漏洞
CVE-2007-1674 LanDesk管理套件Alert服务AOLSRVR.EXE缓冲区溢出漏洞
CVE-2007-1869 Lighttpd多个远程拒绝服务漏洞
CVE-2007-1870 Lighttpd多个远程拒绝服务漏洞
CVE-2007-1891 Akamai Download Manager ActiveX控件GetPrivateProfileSectionW函数栈溢出漏洞
CVE-2007-1892 Akamai Download Manager的DownloadManager控件实现上存在缓冲区溢出漏洞
CVE-2007-2057 Aircrack-ng Airodump-ng认证报文远程栈缓冲区溢出漏洞
CVE-2007-2058 Acubix PicoZip Archive 目录遍历漏洞
CVE-2007-2059 eIQnetworks Enterprise Security AnalyzerESA协议执行工具多个缓冲区溢出漏洞
CVE-2007-2060 Mozilla Firefox Wizz RSS Reader 跨区脚本攻击漏洞
CVE-2007-2061 MailBee WebMail Pro 'Check_login.ASP' 跨站脚本攻击漏洞

Showing top 20 of 85 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2007-2082

No comments yet

Leave a comment