Description
edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter.
References
- 20061012 MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues mailing-list
- 20061011 MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues mailing-list
- 2389 third-party-advisory
- http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt
- callcenter-edit-privilege-escalation(29486) vdb-entry
- 22365 third-party-advisory
- 20474 vdb-entry