Secunia
Login
|
|
CVE Reference: CVE-2006-6820 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-6820 |
|
|
Description: myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter. |
|
|
CVE Status: Candidate |
|
|
References: SAID Secunia Advisory: SA23517 MISC http://www.milw0rm.com/exploits/2995 BID 21739 |
|
| Return to the previous page. |
