Description (CNA)
admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/34977
- http://secunia.com/advisories/35090
- https://www.exploit-db.com/exploits/8691
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50561
ADP enrichment
No English description supplied.