CVEvulnerability

CVE-2007-3630

6.4 MEDIUM Published 2007-07-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-07-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N

Description

changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote attackers to change passwords for arbitrary users via a modified password parameter.

Affected configurations

• av scripts av tutorial script 1.0

References