CVE
- Id
- 24038
- CVE No.
- CVE-2007-0681
- Status
- Candidate
- Description
- profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php.
- Phase
- Assigned (20070202)
- Votes
- None (candidate not yet proposed)
- Comments