VULNERABILITY INTELLIGENCE
CVE-2007-3630
CVSS score6.4 MEDIUM
EPSS probability2.33%
CISA KEVNot currently listed
Published2007-07-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Description
changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote attackers to change passwords for arbitrary users via a modified password parameter.