CVE-2006-0724

2006-02-1611:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON

profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.