Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Dmx_forum |
Dmx_forum |
2.1a (including) |
2.1a (including) |
References