CVE-2007-0760

CVE-2007-0760 affects EQdkp 1.3.1 and earlier, stemming from a flaw in its administrative authentication mechanism. The system relies solely on the HTTP Referer header to validate administrative requests, making it vulnerable to Referer spoofing. This allows unauthenticated remote attackers to read or modify account names and passwords, posing a significant risk to data confidentiality and integrity. With a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and a FAUCET Risk Score of 91/100, this vulnerability is considered highly severe due to its low attack complexity and potential for complete compromise. While not listed on the KEV catalog and lacking Metasploit or Nuclei exploits, an ExploitDB entry (EDB-3252) indicates proof-of-concept code exists for remote database backup, suggesting exploitability, though there is no evidence of active exploitation or significant community discussion.