high7.5
CVE-2006-2727
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username param…
Impact
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Epic Designs | Eggblog | through 3.0.6 Versions 2.0, 3.0 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1005
- http://www.nukedx.com/?viewdoc=36
- http://www.securityfocus.com/archive/1/435284/100/0/threaded
- http://www.securityfocus.com/archive/1/435300/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26833
- http://securityreason.com/securityalert/1005
- http://www.nukedx.com/?viewdoc=36
- http://www.securityfocus.com/archive/1/435284/100/0/threaded
- http://www.securityfocus.com/archive/1/435300/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26833