Vulnerabilities > Duware > Duclassmate > Medium

DATE CVE VULNERABILITY TITLE RISK
2004-12-31 CVE-2004-2198 Remote vulnerability in DUware Software
account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.
network
low complexity
duware
6.4