CVE-2007-2715

None

CVSS

—

EPSS

10.4%

Published

May 16, 2007

CISA due date

—

The record

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.

Affected packages

Ecosystem	Package	Introduced	Fixed