Vulnerability in Snitz_communications Snitz_forums_2000

CVE-2003-0494

password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.

EPSS: 0.038 (88.8th percentile) — read the EPSS interpretation.

Affected products

Snitz_communications Snitz_forums_2000 — versions 3.4.03
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)