CVE-2007-2715: Snaps Gallery

High severity, CVSS 10.0. EPSS: 10.4% chance of exploitation in the next 30 days.

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.

Affected products

• Snaps Gallery Snaps Gallery: version 1.4.4 only

Published 2007-05-16. Last modified 2026-06-16.