CVE-2013-7305

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

fpw.php in e107 through 1.0.4 does not check the user_ban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user.

fpw.php en e107 hasta la versión 1.0.4 no comprueba el campo user_ban, lo que hace más fácil para atacantes remotos restablecer contraseñas mediante el envío de una petición pwsubmit y aprovechando el acceso a la cuenta de email de un usuario baneado.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-01-22 CVE Reserved
2014-01-22 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-255: Credentials Management Errors

CAPEC

References (1)

URL	Tag	Source
http://sourceforge.net/p/e107/svn/13114	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				<= 1.0.4 Search vendor "E107" for product "E107" and version " <= 1.0.4"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.0 Search vendor "E107" for product "E107" and version "0.7.0"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.1 Search vendor "E107" for product "E107" and version "0.7.1"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.2 Search vendor "E107" for product "E107" and version "0.7.2"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.3 Search vendor "E107" for product "E107" and version "0.7.3"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.4 Search vendor "E107" for product "E107" and version "0.7.4"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.5 Search vendor "E107" for product "E107" and version "0.7.5"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.6 Search vendor "E107" for product "E107" and version "0.7.6"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.7 Search vendor "E107" for product "E107" and version "0.7.7"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.8 Search vendor "E107" for product "E107" and version "0.7.8"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.9 Search vendor "E107" for product "E107" and version "0.7.9"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.10 Search vendor "E107" for product "E107" and version "0.7.10"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.11 Search vendor "E107" for product "E107" and version "0.7.11"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.12 Search vendor "E107" for product "E107" and version "0.7.12"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.13 Search vendor "E107" for product "E107" and version "0.7.13"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.14 Search vendor "E107" for product "E107" and version "0.7.14"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.15 Search vendor "E107" for product "E107" and version "0.7.15"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.16 Search vendor "E107" for product "E107" and version "0.7.16"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.17 Search vendor "E107" for product "E107" and version "0.7.17"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.18 Search vendor "E107" for product "E107" and version "0.7.18"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.19 Search vendor "E107" for product "E107" and version "0.7.19"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.20 Search vendor "E107" for product "E107" and version "0.7.20"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.21 Search vendor "E107" for product "E107" and version "0.7.21"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.22 Search vendor "E107" for product "E107" and version "0.7.22"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.24 Search vendor "E107" for product "E107" and version "0.7.24"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				0.7.26 Search vendor "E107" for product "E107" and version "0.7.26"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				1.0.1 Search vendor "E107" for product "E107" and version "1.0.1"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				1.0.2 Search vendor "E107" for product "E107" and version "1.0.2"		-		Affected
E107 Search vendor "E107"		E107 Search vendor "E107" for product "E107"				1.0.3 Search vendor "E107" for product "E107" and version "1.0.3"		-		Affected