PT-2007-4032 · Snaps! · Snaps! Gallery

Dj7Xpl · Published 2007-05-16 · Updated 2017-10-11 · CVE-2007-2715

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Snaps! Gallery version 1.4.4

Description The issue allows remote attackers to change arbitrary usernames and passwords. This is achieved via the username, or the password and password2 parameters in an edit action.

Recommendations For Snaps! Gallery version 1.4.4, avoid using the username, password, and password2 parameters in the edit action until the issue is resolved. As a temporary workaround, consider restricting access to the Admin/users.php file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-2715

Affected Products

Snaps! Gallery

References · 6

• 🔥 https://exploit-db.com/exploits/3900 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2715 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34300 · Note
• http://vupen.com/english/advisories/2007/1781 · Note
• http://securityfocus.com/bid/23940 · Note
• http://0day.2600.ir/exploits/3900 · Note