CVE-2007-3630

no score yetEPSS 2.3%

changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote attackers to change passwords for arbitrary users via a modified password parameter.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2007-07-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

av_scripts:av_tutorial_script

References

http://attrition.org/pipermail/vim/2007-July/001705.html
http://osvdb.org/42461
http://www.securityfocus.com/bid/24808
https://exchange.xforce.ibmcloud.com/vulnerabilities/35295
https://www.exploit-db.com/exploits/4163

Check your stack JSON