CVE-2007-2147

2007-04-1910:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

Low

EPSS

0.016

Percentile

87.6%

JSON

admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows remote attackers to read and modify the classes/vars.php and classes/varstuff.php configuration files via direct requests.