|
CVE Reference: CVE-2006-6821
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2006-6821
|
|
Description:
myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter.
|
|
CVE Status:
Candidate
|
|
References:
SAID
Secunia Advisory: SA23518
MISC
http://www.milw0rm.com/exploits/2996
BID
21739
|
|
|
Return to the previous page.
|
