CVE-2007-4419 in Olatedownload

Sumário

de VulDB • 07/07/2026

Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 18/08/2007
• Divulgação: 18/08/2007
• Moderação: aceite
• Entrada: VDB-38407
• CPE: pronto
• CWE: CWE-287 (confirmado)
• Exploração: Descarregar
• CVSS: 9.3 (NVD)
• EPSS: 0.04831
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-4419
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-4419
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-4419/