Unscored severity · published Jan 18, 2007
CVE-2007-0313
Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Gonicus System Administration · Gonicus
through 2.5.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0313
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0313
Patch
http://oss.gonicus.de/pipermail/gosa/2007-January/002650.html
osvdb.org
http://osvdb.org/32821
Vendor Advisory
http://secunia.com/advisories/23749
www.vupen.com
http://www.vupen.com/english/advisories/2007/0207
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/31516
More from Gonicus System Administration
–
CVE-2003-1412
PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to…