Description
useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account information via a modified user parameter.
References
- 1013038 vdb-entry
- 12395 vdb-entry
- 20050128 Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2 mailing-list