CVE-2006-0203

Description

membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter.

Weakness classification

• CWE-20: Improper Input Validation

Primary references

• cve@mitre.org — Exploit, Vendor Advisory
• cve@mitre.org — Exploit, Vendor Advisory
• cve@mitre.org — Exploit, Vendor Advisory
• cve@mitre.org — Exploit, Vendor Advisory
• cve@mitre.org
• cve@mitre.org — Exploit
• cve@mitre.org
• cve@mitre.org — Vendor Advisory
• cve@mitre.org
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory