Vulnerability Details CVE-2007-4932
admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.025
EPSS Ranking 82.9%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/40149
- http://secunia.com/advisories/26840
- http://www.securityfocus.com/bid/25695
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36646
- https://www.exploit-db.com/exploits/4419
- http://osvdb.org/40149
- http://secunia.com/advisories/26840
- http://www.securityfocus.com/bid/25695
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36646
- https://www.exploit-db.com/exploits/4419
Products affected by CVE-2007-4932
-
cpe:2.3:a:shop-script:shop-script:*