Vulnerabilities

TI-2007-03581 CVE-2007-3691 · GHSA-394v-q6vg-27qq

Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial)…

LOW 32

Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial) 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) userid par…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00999 Published 2007-07-11 No fix listed

TI-2007-03534 CVE-2007-3643 · GHSA-93x6-25w5-vc7r

admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid…

MEDIUM 47

admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows remote attackers to perform certain administrative actions.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02237 Published 2007-07-10 No fix listed

TI-2007-03521 CVE-2007-3630 · GHSA-86w8-6xgq-q96x

changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or…

LOW 33

changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote attackers to change passwords for arbitrary users via a modifi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.0233 Published 2007-07-10 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial)…

admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid…

changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or…