What is CVE-2013-7196?

CVE-2013-7196 is a vulnerability in Phpfox, classified under CWE-264. Published 2014-04-18.

Is CVE-2013-7196 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Phpfox

CVE-2013-7196

static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified val[item_id] parameter for the publication.

EPSS: 0.024 (82.6th percentile) — read the EPSS interpretation.

Affected products

Phpfox — versions 3.7.3, 3.7.4, 3.7.5
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

wesleyleite/CVE

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2013-7196?: CVE-2013-7196 is a vulnerability in Phpfox, classified under CWE-264. Published 2014-04-18.
Is CVE-2013-7196 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.