high7.5Public exploit code
CVE-2008-7155
NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the password of arbitrary users via a direc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NetRisk 1.9.7 - Remote Password Change2008-01-05 · webapps · php · Verified
Impact
NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the password of arbitrary users via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phprisk | Netrisk | Version 1.9.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://downloads.securityfocus.com/vulnerabilities/exploits/27150.pl
- http://www.securityfocus.com/bid/27150
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39465
- http://downloads.securityfocus.com/vulnerabilities/exploits/27150.pl
- http://www.securityfocus.com/bid/27150
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39465