CVE-2007-2715 – Snaps! Gallery 1.4.4 - Remote User Pass Change

https://notcve.org/view.php?id=CVE-2007-2715

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action. Admin/users.php en el Snaps! Gallery 1.4.4 permite a atacantes remotos cambiar nombres de usuario y contraseñas de su elección a través de los parámetros (1) username o (2) password y password2 en una acción de edición. • https://www.exploit-db.com/exploits/3900 http://0day.2600.ir/exploits/3900 http://www.securityfocus.com/bid/23940 http://www.vupen.com/english/advisories/2007/1781 https://exchange.xforce.ibmcloud.com/vulnerabilities/34300 •