CVEvulnerability
CVE-2007-2715
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-05-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.
Affected configurations
• snaps gallery snaps gallery 1.4.4
References
- http://0day.2600.ir/exploits/3900 0day.2600.ir
- http://www.securityfocus.com/bid/23940 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1781 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34300 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3900 www.exploit-db.com
- http://0day.2600.ir/exploits/3900 0day.2600.ir
- http://www.securityfocus.com/bid/23940 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1781 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34300 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3900 www.exploit-db.com