changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote attackers to change passwords for arbitrary users via a modified password parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-07-10T00:00:00
Updated: 2024-08-07T14:21:36.639Z
Reserved: 2007-07-09T00:00:00
Link: CVE-2007-3630
Vulnrichment
No data.
NVD
Status : Modified
Published: 2007-07-10T00:30:00.000
Modified: 2024-11-21T00:33:41.917
Link: CVE-2007-3630
Redhat
No data.