Lucene search
HistoryMay 16, 2007 - 10:19 a.m.
CVE-2007-2715
snaps! gallery
cve-2007-2715
security vulnerability
remote attack
user credentials
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
High
0.054 Low
EPSS
Percentile
93.2%
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.
Affected configurations
Node
snaps_gallerysnaps_galleryMatch1.4.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| snaps_gallery:snaps_gallery | snaps gallery | eq | 1.4.4 |
References
Social References
More
Related
prion
prion
Design/Logic Flaw
2007-05-16 10:19:00
cvelist
cvelist
CVE-2007-2715
2007-05-16 10:00:00
nvd
nvd
CVE-2007-2715
2007-05-16 10:19:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
High
0.054 Low
EPSS
Percentile
93.2%
Related for CVE-2007-2715