Lucene search
PRIOn knowledge basePRION:CVE-2007-3630HistoryJul 10, 2007 - 12:30 a.m.
Default credentials
2007-07-1000:30:00
PRIOn knowledge base
www.prio-n.com
3
7.3 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.026 Low
EPSS
Percentile
90.0%
changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote attackers to change passwords for arbitrary users via a modified password parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| av_tutorial_script | eq | 1.0 |
Related
cve
cve
CVE-2007-3630
2007-07-10 00:30:00
CVE-2007-3691
2007-07-11 17:30:00
prion
prion
Sql injection
2007-07-11 17:30:00
7.3 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.026 Low
EPSS
Percentile
90.0%
Related for PRION:CVE-2007-3630