CVE-1999-0394

DPEC Online Courseware allows an attacker to change another user's password without knowing the original password...