Lucene search
HistoryJul 10, 2007 - 12:30 a.m.
CVE-2007-3630
av tutorial script
avtutorial
changepw.php
unauthenticated access
password change vulnerability
7.3 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.03 Low
EPSS
Percentile
90.8%
changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote attackers to change passwords for arbitrary users via a modified password parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| av_scripts:av_tutorial_script | av scripts av tutorial script | eq | 1.0 |
Related
prion
prion
Default credentials
2007-07-10 00:30:00
Sql injection
2007-07-11 17:30:00
cve
cve
CVE-2007-3691
2007-07-11 17:30:00
7.3 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.03 Low
EPSS
Percentile
90.8%
Related for CVE-2007-3630