high7.5Public exploit code
CVE-2007-5644
Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortroles.php, which allows remote attackers t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vanilla 1.1.3 - Blind SQL Injection2007-10-20 · webapps · php · Verified
Impact
Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortroles.php, which allows remote attackers to conduct unauthorized sort operations and other activities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lussumo | Vanilla | through 1.1.3 |