CVE-2007-4637

xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2007-08-31

Last modified

2024-08-07

Affected products

• Xgb (Xgb)

References

• https://www.exploit-db.com/exploits/4336