Description
password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.
References
- 20030616 Multiple Vulnerabilities In Snitz Forums mailing-list
- snitz-forums-password-reset(12326) vdb-entry
- 7925 vdb-entry