CVE-2006-0684

change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers to gain unauthorized access.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.15% chance of exploitation in the next 30 days, 87th percentile

Published

2006-02-15

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27204

References

• CVE Record
• NVD entry

Related

• CVE-2006-0681
• CVE-2006-0685
• CVE-2006-0679
• CVE-2006-0687
• CVE-2006-0676
• CVE-2006-0688