generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Stanford_conference_and_research_forum | Paul_tarjan | beta (including) | beta (including) |