CVE-2009-3180

Description

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php.

Affected Platforms

Weakness Type

CWE-255

References

• http://secunia.com/advisories/33686
• http://www.exploit-db.com/exploits/9425
• http://secunia.com/advisories/33686
• http://www.exploit-db.com/exploits/9425