medium5.0Public exploit code
CVE-2007-1553
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Guestbara 1.2 - Change Admin Login and Password2007-03-18 · webapps · php · Verified
Impact
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified admin_mail, login, and pass parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Guestbara | Guestbara | through 1.2 |