Description
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter.
References
- 1005 third-party-advisory
- 20060528 Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities mailing-list
- eggblog-register-security-bypass(26833) vdb-entry
- http://www.nukedx.com/?viewdoc=36
- 20060529 RE: Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities mailing-list