CVE-2007-0697: Medium severity Mentiss Acgv Acgvannu vulnerability
index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modified id parameter, related to templates/modif.html. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2007-0697?
CVE-2007-0697 is a security flaw in ACGVannu 1.3 and earlier that allows remote attackers to change user passwords or profiles by manipulating the id parameter.
What is the severity of CVE-2007-0697?
CVE-2007-0697 is considered a critical vulnerability due to the potential for unauthorized account access and user impersonation.
How can I fix CVE-2007-0697?
To fix CVE-2007-0697, upgrade to a version of ACGVannu that addresses this vulnerability, or implement input validation mechanisms for the id parameter.
Who is affected by CVE-2007-0697?
Users of ACGVannu versions 1.3 and earlier are affected by CVE-2007-0697.
What type of attack does CVE-2007-0697 enable?
CVE-2007-0697 enables remote code execution attacks where attackers can alter user profiles and passwords.