Low severity · published Jan 4, 2017
CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host…
3.7
CVSS
1.1%
EPSS
No
On KEV
Description
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Dotclear · Dotclear
through 2.10.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-7903
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-7903
Mailing List
http://www.openwall.com/lists/oss-security/2016/10/05/5
www.securityfocus.com
http://www.securityfocus.com/bid/93439
Patch
https://dotclear.org/blog/post/2016/11/01/Dotclear-2.10.3
Patch
https://hg.dotclear.org/dotclear/rev/bb06343f4247
More from Dotclear
8.8
CVE-2023-53952
Dotclear 2.25.3 Authenticated Remote Code Execution via File Upload
8.8
CVE-2024-58281
Dotclear 2.29 Remote Code Execution via Authenticated File Upload
8.8
CVE-2015-8832
Multiple incomplete blacklist vulnerabilities in inc/core/class.dc.core.php in Dotclear before 2.8.2 allow remote authenticated users with "manage their own media items" and…
8.8
CVE-2016-7902
Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authenticated users with permissions to manage media items to execute…
7.2
CVE-2016-9268
Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated…