CVE-2007-4637 xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps.
MediumCVSS 6.4
EPSS 2.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xgb | = 2.0 | No fix listed |
References
- 4336 exploit