CVE-2007-4932

2007-09-1818:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.7%

JSON

admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel.

References

osvdb.org/40149

secunia.com/advisories/26840

www.securityfocus.com/bid/25695

exchange.xforce.ibmcloud.com/vulnerabilities/36646

www.exploit-db.com/exploits/4419