← Database

CVE-2004-2198

MEDIUM CVSS: 6.4 Published: 2004-12-31 Modified: 2026-06-16

Description

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.

Affected Platforms

Duware Duclassmate

Weakness Type

NVD-CWE-Other

References