CVE-2007-1243

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Audins Audiens 3.3 allows remote attackers to bypass authentication and perform certain privileged actions, possibly an uninstall of the product, by calling unistall.php with the values cnf=disinstalla and status=on. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/33792
http://secunia.com/advisories/24254Vendor Advisory
http://www.securityfocus.com/bid/22728Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32707
http://osvdb.org/33792
http://secunia.com/advisories/24254Vendor Advisory
http://www.securityfocus.com/bid/22728Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32707

Timeline

Published: Mar 3, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-12446.8Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileg CVE-2007-12454.3IrfanView 3.99 allows remote attackers to cause a denial of service (application crash) via a malformed WMF file.CVE-2007-12467.6The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biS CVE-2007-12476.8Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary PHP code via a URL CVE-2007-12484.3Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script CVE-2007-12496.8MoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the additional environment security configuration," whic CVE-2007-12507.5SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers to execute arbitrary CVE-2007-12519.3Format string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allo CVE-2007-12529.3Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service (crash) and pos CVE-2007-12539.3Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-ass CVE-2007-12546.5SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitra CVE-2007-12556.0Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to