CVE-2007-6174 Privilege escalation in n/a

High 8.5 Published 30 Nov 2007 Updated 7 Aug 2024

Authenticated users can escalate privileges by sending a crafted request to update their profile in PHPDevShell.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2007-6174?

CVE-2007-6174 is a high-severity vulnerability in n/a, published on 30 Nov 2007. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information.

Weakness: CWE-264

Which versions are affected by CVE-2007-6174?

It affects 1 product.

Products include Phpdevshell Phpdevshell.

How do I fix CVE-2007-6174?

No fix has been published for CVE-2007-6174 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-6174 being exploited?

There is no known exploitation of CVE-2007-6174 in the wild and no public exploit code.

Sources

Also known as GHSA-wwj2-hpx3-j824.