| Package | Affected versions | Patched versions |
|---|---|---|
| snaps gallery | = 1.4.4 |
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free