CVE-2005-2257 The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_id parameter.
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpslash | = 0.8.0 | No fix listed |
References
- 20050707 phpSlash account hijacking vulnerability mailing-list
- 15936 patch third-party-advisory vendor-advisory
- 1014415 exploit vdb-entry