CVE-2007-2715

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

10.20% chance of exploitation in the next 30 days, 95th percentile

Published

2007-05-16

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3900

References

• CVE Record
• NVD entry

Related

• CVE-2007-2714
• CVE-2007-2716
• CVE-2007-2711
• CVE-2007-2717
• CVE-2007-2710
• CVE-2007-2718