Description
admin/admin_membre/fiche_membre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via the idmembre parameter, which discloses the passwords for arbitrary users.
References
- 20061209 AnnonceScriptHP V2.0 Multiple Vulnerabilities mailing-list
- annoncescripthp-fiche-info-disclosure(30805) vdb-entry
- 21514 vdb-entry
- 23318 third-party-advisory
- 2019 third-party-advisory