high7.5Public exploit code
CVE-2007-1480
Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php with Name, Email, and PASSWORD paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- creative Guestbook 1.0 - Multiple Vulnerabilities2007-03-15 · webapps · php · Verified
Impact
Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php with Name, Email, and PASSWORD parameters set.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Creative Guestbook | Creative Guestbook | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/34234
- http://secunia.com/advisories/24536
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33014
- https://www.exploit-db.com/exploits/3489
- http://osvdb.org/34234
- http://secunia.com/advisories/24536
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33014
- https://www.exploit-db.com/exploits/3489