CVE-2007-0760

EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers…

published February 6, 2007

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers to read or modify account names and passwords via a spoofed Referer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02530 · 84.8th percentile
Published
2007-02-06T02:00Z
EPSS history
Timeline
  • 06 FEB 02:00Z
    EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers…
    cvelistv5