CVE

Id
27994  
CVE No.
CVE-2007-4637  
Status
Candidate  
Description
xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps.  
Phase
Assigned (20070831)  
Votes
None (candidate not yet proposed)  
Comments