CVE-2007-0681

CVE-2007-0681 affects ExtCalendar 2 and earlier. The vulnerability: profile.php lets remote attackers change arbitrary users’ passwords without the original password by submitting modified values to register.php, potentially enabling other unauthorized actions. Impact is noted as high/critical (C...