Vulnerability Details CVE-2007-5835
Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritten files) and possibly obtain administrative access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.6%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2007-5835
-
cpe:2.3:a:bosdev:bosnews:4
-
cpe:2.3:a:bosdev:bosnews:5