CVE-2006-7145

edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...

CVE-2006-7145

CVE-2006-7145 concerns Call Center Software (0.93 and earlier). The vulnerability allows remote attackers to disclose sensitive data (e.g., account passwords) by sending a modified user_id parameter in edit_user.php, leading to partial confidentiality impact and partial integrity impact. The NVD ...