← Database

CVE-2006-2807

CRITICAL CVSS: 10.0 Published: 2006-06-05 Modified: 2026-06-16

Description

ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp.

Affected Platforms

Aspwebsoft Speedy Asp Discussion Forum

Weakness Type

NVD-CWE-Other

References