CVE-2006-6007

save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.02% chance of exploitation in the next 30 days, 61th percentile

Published

2006-11-21

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/451411/100/0/threaded

References

• CVE Record
• NVD entry

Related

• CVE-2006-5987
• CVE-2006-6010
• CVE-2006-5983
• CVE-2006-6015
• CVE-2006-5976
• CVE-2006-6016