CVE-2007-6661

Description

2z project 0.9.6.1 allows attackers to change the password without supplying the old password.

Affected Platforms

Weakness Type

CWE-255

References

• http://2z-project.ru/forum/viewtopic.php?pid=8309
• http://securityreason.com/securityalert/3514
• http://www.securityfocus.com/archive/1/485590/100/0/threaded
• http://www.securityfocus.com/bid/27057
• http://2z-project.ru/forum/viewtopic.php?pid=8309
• http://securityreason.com/securityalert/3514