Description
2z project 0.9.6.1 allows attackers to change the password without supplying the old password.
References
- 27057 vdb-entry
- 3514 third-party-advisory
- 20071228 2z-project 0.9.6.1 Multiple Security Vulnerabilities mailing-list
- http://2z-project.ru/forum/viewtopic.php?pid=8309