CVE-2006-0203

membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the…

published January 13, 2006

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02044 · 81.0th percentile
Published
2006-01-13T23:00Z
EPSS history
Timeline
  • 13 JAN 23:00Z
    membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the…
    cvelistv5