ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Speedy_asp_discussion_forum | Aspwebsoft | * | * |