131 matches found
CVE-2007-1360: Undefined Security Weakness
Unspecified vulnerability in the Nodefamily module for Drupal 5.x before 5.x-1.0 allows remote authenticated users to access and modify other users' profiles via unspecified URL parameters...
CVE-2007-0697
CVE-2007-0697 affects the ACGVannu web application (version 1.3 and earlier). The issue is a logic flaw in index2.php related to a modified id parameter (referenced by templates/modif.html) that allows remote attackers to change a user’s password or profile. The available sources report this as a...
CVE-2007-0516
CVE-2007-0516 affects the Yana Framework prior to 2.8.5a. Remote authenticated users with permissions to modify a guestbook profile can modify or delete arbitrary guestbook profiles via unspecified vectors. The vulnerability implies integrity impact (partial) and potential system exposure at the ...
CVE-2007-0516: Undefined Security Weakness
Yana Framework before 2.8.5a allows remote authenticated users with permissions to modify a guestbook profile to modify or delete arbitrary guestbook profiles via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6821: Undefined Security Weakness
myprofile.asp in Enthrallweb eNews does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6820: Undefined Security Weakness
myprofile.asp in Enthrallweb eCoupons does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6007: Undefined Security Weakness
saveprofile.asp in WebEvents Online Event Registration Template 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter...
CVE-2002-1659
userprofile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the userid variable...
phpBB/gender mod allows get admin privilege, exploit/patch
Annoucement: Sua loi thay doi quyen user trong phpbb2.x In phpBB with the official Gender Mod, this vuln allows a normal user set her/himself to become a forum administrator. Nguoi viet/Author: PTTrung http://hackervn.net caothuvolam http://viethacker.net langtuhaohoa [email protected]...
