Description
membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter.
References
- 344 third-party-advisory
- 22385 vdb-entry
- 20060129 [xpl#2] MiniNuke 1.8.2 - change member's passwrod < Perl > mailing-list
- 18439 third-party-advisory
- ADV-2006-0173 vdb-entry
- 20060113 Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remoteuser password change exploit mailing-list
- 20060112 Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remote user password change exploit mailing-list
- mininuke-membership-change-password(24101) vdb-entry
- 20060112 Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability mailing-list