CVE-2007-5374
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when...
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
Exploit likelihood
What each source reports
NVD Score used
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
- Record
CVE-2007-5374- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
- Record
CVE-2007-5374- Updated
- 2026-11-02
EUVDEUVD-2007-5352 No score
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
- Record
EUVD-2007-5352- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-45rh-4228-3jmv No score
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when...
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
- Record
GHSA-45rh-4228-3jmv- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | LightBlog 8.4.1.1 - Remote Code Execution | 2007-10-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5374 is a medium vulnerability (CVSS 6.5) in Lightblog, published October 11, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.19%, the 82nd percentile. No source names a fixed version.