← Database

CVE-2007-5374

MEDIUM CVSS: 6.5 Published: 2007-10-11 Modified: 2026-06-16

Description

cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.

Affected Platforms

Lightblog Lightblog

Weakness Type

CWE-287

References