« Volver al listado

CVE-2007-2554

Estado: ModificadaAlta (7.8)—

Associated Press (AP) Newspower 4.0.1 y versiones anteriores utiliza una contraseña en blanco por defecto para el usuario root de MySQL, lo cual permite a atacantes remotos insertar o modificar artículos de noticias mediante shows.tblscript.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Associated Press — Newspower

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-2554",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:C/A:N",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-05-09T17:19:00.000",
  "references": [
    {
      "url": "http://osvdb.org/36251",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/2679",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/467962/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/36251",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/2679",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/467962/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Associated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript."
    },
    {
      "lang": "es",
      "value": "Associated Press (AP) Newspower 4.0.1 y versiones anteriores utiliza una contraseña en blanco por defecto para el usuario root de MySQL, lo cual permite a atacantes remotos insertar o modificar artículos de noticias mediante shows.tblscript."
    }
  ],
  "lastModified": "2026-06-16T22:39:49.797",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:associated_press:newspower:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C59EE8C-38B3-4151-A062-AE6EA5AF2687",
              "versionEndIncluding": "4.0.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}