CVE-2007-1925 : The borrado function in modules/Your_Account/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that account

The borrado function in modules/Your_Account/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that account deletion requests come from the account owner, which allows remote authenticated users to delete arbitrary accounts via a modified cookie.

Published 2007-04-10 23:19:00

Updated 2017-07-29 01:31:08

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-1925

EPSS FAQ

0.49%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 76 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-1925

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

Products affected by CVE-2007-1925

Tru-zone » Nukeet
Versions up to, including, (<=) 3.4
cpe:2.3:a:tru-zone:nukeet:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2007-1925

Exploit prediction scoring system (EPSS) score for CVE-2007-1925

CVSS scores for CVE-2007-1925

References for CVE-2007-1925

Products affected by CVE-2007-1925