Description (CNA)
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.vupen.com/english/advisories/2007/1781
- http://www.securityfocus.com/bid/23940
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34300
- http://0day.2600.ir/exploits/3900
- https://www.exploit-db.com/exploits/3900
ADP enrichment
No English description supplied.