CVE-2006-7145 edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter.
MediumCVSS 5.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| call-center-software | <= 0.93 | No fix listed |
References
- 20061011 MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues exploit mailing-list vendor-advisory
- 22365 third-party-advisory vendor-advisory
- 2389 third-party-advisory
- www.mayhemiclabs.com exploit vendor-advisory
- 20061012 MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues mailing-list
- 20474 vdb-entry vendor-advisory
- callcenter-edit-privilege-escalation(29486) vdb-entry