CVE-2007-1553

admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified admin_mail, login, and pass parameters.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.82% chance of exploitation in the next 30 days, 77th percentile

Published

2007-03-20

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3506

References

• CVE Record
• NVD entry

Related

• CVE-2007-1552
• CVE-2007-1555
• CVE-2007-1550
• CVE-2007-1556
• CVE-2007-1548
• CVE-2007-1559