CVE-2007-3446 Hardcoded credentials in n/a

High 7.5 Published 27 Jun 2007 Updated 7 Aug 2024

Remote attackers can gain unauthorized access using default demo credentials in BugMall Shopping Cart.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2007-3446?

CVE-2007-3446 is a high-severity vulnerability in n/a, published on 27 Jun 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers to obtain login access.

Which versions are affected by CVE-2007-3446?

It affects 1 product.

Products include Bugmall Shopping Cart.

How do I fix CVE-2007-3446?

No fix has been published for CVE-2007-3446 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-3446 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-3446 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-96j2-crfj-6gpp.