CVE-2007-1432

HIGH 7.5CVE-2007-1432 · Published 13/03/2007 · updated 16/06/2026

In short

CVE-2007-1432 is a HIGH (CVSS 7.5) vulnerability affecting grayscale blog (grayscale).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
grayscale blog grayscale	`≤ 0.8.0`	No fix yet

Description

Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments in (1) the user_permissions parameter to add_users.php, and unspecified parameters to (2) addblog.php, (3) editblog.php, (4) editlinks.php, (5) edit_users.php, and (6) add_links.php.

References

securityreason.com/securityalert/2417
securityfocus.com/archive/1/462441/100/0/threaded
securityfocus.com/bid/22911
vupen.com/english/advisories/2007/0916

More vulnerabilities in grayscale blog

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free