VYPR
Unrated severityNVD Advisory· Published Oct 23, 2007· Updated Apr 23, 2026

CVE-2007-5644

CVE-2007-5644

Description

Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortroles.php, which allows remote attackers to conduct unauthorized sort operations and other activities.

Affected products

1
  • cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*
    Range: <=1.1.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.