CVE-2006-6007 | BDVDB-2026-20402 Detail

Description#

save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/1888
http://www.securityfocus.com/archive/1/451411/100/0/threaded

Exploit#

No public exploit known

History#

Version 12006-11-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.