CVE-2007-2715
HIGH 10.0EPSS 10.4%
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.
- CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 10.39% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2007-05-16
- Updated
- 2024-08-07