CVE-2007-2715 Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.
HighCVSS 10.0
EPSS 10.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snaps gallery | = 1.4.4 | No fix listed |
References
- 0day.2600.ir
- 23940 vdb-entry
- ADV-2007-1781 vdb-entry
- snaps-users-unauthorized-access(34300) vdb-entry
- 3900 exploit