3 matches found
CVE-2021-29394
Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote authenticated users to change the password of any targeted user accounts via lack of proper authorization in the user-controlled "userID" parameter of the HTTP POST...
PT-2022-9920
Name of the Vulnerable Software and Affected Versions NorthStar Club Management version 6.3 Description The issue allows remote authenticated users to change the password of any targeted user account due to a lack of proper authorization in the userID parameter of the HTTP POST request to the...
CVE-2021-29394: Incorrect Authorization
Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote authenticated users to change the password of any targeted user accounts via lack of proper authorization in the user-controlled "userID" parameter of the HTTP POST...