Description
The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_id parameter.
References
- 1014415 vdb-entry
- 20050707 phpSlash account hijacking vulnerability mailing-list
- 15936 third-party-advisory