Vulnerability in Yana Framework

CVE-2007-0516

Yana Framework before 2.8.5a allows remote authenticated users with permissions to modify a guestbook profile to modify or delete arbitrary guestbook profiles via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 0.009 (57.6th percentile) — read the EPSS interpretation.

Affected products

Yana_framework — versions 2.8, 2.8.1, 2.8.2a
N/a — versions n/a

References

cve@mitre.org (Patch, x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)