CVE-2006-0684

change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may…

published February 15, 2006

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers to gain unauthorized access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03149 · 87.8th percentile
Published
2006-02-15T00:00Z
EPSS history
Timeline
  • 15 FEB 00:00Z
    change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may…
    cvelistv5