avts10-passwd.txt

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i...

CVE-2007-3630

The CVE-2007-3630 entry concerns AV Tutorial Script (avtutorial) 1.0. The vulnerability is in changePW.php and allows remote attackers to change passwords for arbitrary users without authentication or knowledge of an old password by supplying a modified password parameter. This is a network-acces...