CVE-2007-2715

Published: May 16, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.

Affected (1)

Products: Snaps Gallery: Snaps Gallery

Snaps Gallery

1 product

Snaps Gallery

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Snaps Gallery Snaps Gallery	Version 1.4.4

References (10)

http://0day.2600.ir/exploits/3900

Source: cve@mitre.org

http://www.securityfocus.com/bid/23940

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1781

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34300

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3900

Source: cve@mitre.org

http://0day.2600.ir/exploits/3900