Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2015-10129— planet-freo auth.inc.php comparison

Quick assessment

Affected
n/a planet-freo
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

moonmoon是一个类似于 Planetplanet 的基于网络的聚合器。 它可用于将具有相同兴趣的不同博客的文章混合到单个页面中。 moonmoon 存在安全漏洞，该漏洞源于 admin/inc/auth.inc.php 页面的 auth 参数存在不正确的比较。

CVSS 3.7 · Low EPSS 0.62% · P48

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2015-10129

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
planet-freo auth.inc.php comparison
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in planet-freo up to 20150116 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/inc/auth.inc.php. The manipulation of the argument auth leads to incorrect comparison. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 6ad38c58a45642eb8c7844e2f272ef199f59550d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-252716.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的比较
Source: CVE Program / CVE List V5
Vulnerability Title
moonmoon 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
moonmoon是一个类似于 Planetplanet 的基于网络的聚合器。 它可用于将具有相同兴趣的不同博客的文章混合到单个页面中。 moonmoon 存在安全漏洞，该漏洞源于 admin/inc/auth.inc.php 页面的 auth 参数存在不正确的比较。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- planet-freo 20150116 -

II. Public POCs for CVE-2015-10129

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-10129

请登录查看更多情报信息。

Patches & Fixes for CVE-2015-10129 (1)

Vendor Advisories for CVE-2015-10129 (2)

Same Patch Batch · n/a · 2024-02-04 · 9 CVEs total

CVE-2021-4435 7.7 HIGH Yarn: untrusted search path
CVE-2024-25062 libxml2 安全漏洞
CVE-2020-36773 Artifex Software Ghostscript 安全漏洞
CVE-2023-52425 libexpat 安全漏洞
CVE-2023-52426 libexpat 安全漏洞
CVE-2021-46902 Meinberg LANTIME-Firmware 安全漏洞
CVE-2021-46903 Meinberg Funkuhren Meinberg LANTIME-Firmware 安全漏洞
CVE-2024-25089 Malwarebytes Binisoft Windows Firewall Control 安全漏洞

IV. Related Vulnerabilities

Same vendor: n/a
Same weakness: CWE-697

V. Comments for CVE-2015-10129

No comments yet

Leave a comment