EV0072.txt

New eVuln Advisory: Magic News Lite PHP Code Execution & Unauthorized Data Modification http://evuln.com/vulns/72/summary.html --------------------Summary---------------- eVuln ID: EV0072 CVE: CVE-2006-0723 CVE-2006-0724 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com...

[eVuln] Magic News Lite PHP Code Execution & Unauthorized Data Modification

New eVuln Advisory: Magic News Lite PHP Code Execution & Unauthorized Data Modification http://evuln.com/vulns/72/summary.html --------------------Summary---------------- eVuln ID: EV0072 CVE: CVE-2006-0723 CVE-2006-0724 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com...

CVE-2006-0724

CVE-2006-0724 affects Reamday Enterprises’ Magic News Lite 1.2.3. The vulnerability exists in profile.php where several parameters (action, passwd, admin_password, new_passwd, confirm_passwd) are not initialized when register_globals is enabled. This allows remote attackers to modify program beha...