PT-2007-4032 · Snaps! · Snaps! Gallery

Dj7Xpl · Publicado 2007-05-16 · Atualizado 2017-10-11 · CVE-2007-2715

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Snaps! Gallery version 1.4.4

Description The issue allows remote attackers to change arbitrary usernames and passwords. This is achieved via the username, or the password and password2 parameters in an edit action.

Recommendations For Snaps! Gallery version 1.4.4, avoid using the username, password, and password2 parameters in the edit action until the issue is resolved. As a temporary workaround, consider restricting access to the Admin/users.php file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-2715

Produtos afetados

Snaps! Gallery

Referências · 6

• 🔥 https://exploit-db.com/exploits/3900 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34300 · Nota
• http://vupen.com/english/advisories/2007/1781 · Nota
• http://securityfocus.com/bid/23940 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2715 · Nota de Segurança
• http://0day.2600.ir/exploits/3900 · Nota