Description (CNA)
Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.debian.org/security/2003/dsa-271
- http://marc.info/?l=bugtraq&m=104636153214262&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11431
- http://marc.info/?l=bugtraq&m=104673407728323&w=2
- http://www.securityfocus.com/bid/6971
ADP enrichment
No English description supplied.