CVE-2007-5579: High severity Pligg Pligg CMS vulnerability
login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5579?
CVE-2007-5579 is considered a medium severity vulnerability due to its potential for unauthorized password resets.
How do I fix CVE-2007-5579?
To fix CVE-2007-5579, implement a more secure method for generating and validating the confirmation code for password resets.
Who is affected by CVE-2007-5579?
CVE-2007-5579 affects users of Pligg CMS version 9.5 who have forgotten their passwords.
What type of attack does CVE-2007-5579 enable?
CVE-2007-5579 enables remote attackers to reset a user's password using a guessable confirmation code.
Is CVE-2007-5579 still a relevant vulnerability today?
While CVE-2007-5579 has historically been noted, it is essential for current users of Pligg CMS to confirm if the vulnerability has been addressed in later updates.