medium5.0
CVE-2008-0701
ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via ac…
Impact
ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Magnolia | Ce | Versions 3.5.1, 3.5.2, 3.5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jira.magnolia.info/browse/MAGNOLIA-2021
- http://secunia.com/advisories/28745
- http://sourceforge.net/project/shownotes.php?release_id=573088
- http://www.securityfocus.com/bid/27608
- http://jira.magnolia.info/browse/MAGNOLIA-2021
- http://secunia.com/advisories/28745
- http://sourceforge.net/project/shownotes.php?release_id=573088
- http://www.securityfocus.com/bid/27608