Vulnerability in Lussumo Vanilla
CVE-2007-5644
Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortroles.php, which allows remote attackers to conduct unauthorized sort operations and other activities.
EPSS: 0.021 (80.0th percentile) — read the EPSS interpretation.
Affected products
- Lussumo Vanilla
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)