CVE-2006-6820

2006-12-29T11:28:00
ID CVE-2006-6820
Type cve
Reporter cve@mitre.org
Modified 2017-10-19T01:29:00

Description

myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter.