Description
index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries via a URL with a modified entry ID.
References
- topo-index-data-manipulation(27711) vdb-entry
- 1279 third-party-advisory
- 20060712 TOPo v.2.2.178 Account Reset mailing-list
- 18959 vdb-entry