Vulnerabilities > CVE-2006-2727 - Denial-Of-Service vulnerability in Epic Designs Eggblog 2.0/3.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
epic-designs

Summary

home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter. This vulnerability is addressed in the following product release: Epic Designs, eggblog, 3.0.7

Vulnerable Configurations

Part Description Count
Application
Epic_Designs
3