7.5
CVSSv2

CVE-2003-0162

Published: 02/04/2003 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote malicious users to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.

Vulnerable Product Search on Vulmon Subscribe to Product

ecartis ecartis 1.0.0_snapshot_2002-10-13

Vendor Advisories

A problem has been discovered in ecartis, a mailing list manager, formerly known as listar This vulnerability enables an attacker to reset the password of any user defined on the list server, including the list admins For the stable distribution (woody) this problem has been fixed in version 0129a+100-snap20020514-11 of ecartis For the old s ...