Unscored CVE-2007-2554 EUVD-2007-2547GHSA-jg22-m6v9-7rwj

Associated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers t…

Published May 9, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Associated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript.

References

36251 vdb-entry
2679 third-party-advisory
20070508 AP Newspower software <=4.0.1 allows remote data manipulation mailing-list