Description
PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.
References
- 10565 third-party-advisory
- 20040106 Vuln in PHPGEDVIEW 2.61 Multi-Problem mailing-list
- phpgedview-modify-admin-password(14161) vdb-entry
- 3403 vdb-entry