CVE-2006-2807 ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and....
HighCVSS 10.0
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aspwebsoft speedy asp discussion forum | All versions | No fix listed |
References
- 1037 third-party-advisory
- 20060527 Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit mailing-list
- 18170 exploit vdb-entry
- speedyaspforum-user-account-manipulation(26811) vdb-entry