CVE-2006-6821

2006-12-29T11:28:00
ID CVE-2006-6821
Type cve
Reporter cve@mitre.org
Modified 2017-10-19T01:29:00

Description

myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter.