Vulnerabilities > CVE-2006-2807 - Unspecified vulnerability in Aspwebsoft Speedy ASP Discussion Forum

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
aspwebsoft
exploit available

Summary

ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp.

Vulnerable Configurations

Part Description Count
Application
Aspwebsoft
1

Exploit-Db

descriptionSpeedy ASP Forum (profileupdate.asp) User Pass Change Exploit. CVE-2006-2807. Webapps exploit for asp platform
idEDB-ID:1849
last seen2016-01-31
modified2006-05-29
published2006-05-29
reporterajann
sourcehttps://www.exploit-db.com/download/1849/
titleSpeedy ASP Forum profileupdate.asp User Pass Change Exploit