CVE-2006-6007 save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified U...
MediumCVSS 5.0
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webevents online event registration | <= 2.0 | No fix listed |
References
- 1888 third-party-advisory
- 20061112 Online Event Registration <= v2.0 (save_profile.asp) Remote User Pass Change Exploit mailing-list