Security Advisory

CVE-2006-0157

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-01-10 11:00:00
Last updated 2024-08-07 16:25:33
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, then declares the new password string in the new_passwd and confirm_passwd parameters.