CVE-2004-2198

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 645

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

account.asp in DUware DUclassmate 1.0 up to and including 1.1 allows remote malicious users to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
duware duclassmate 1.1
duware duclassmate 1.0

source: wwwsecurityfocuscom/bid/11363/info Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks An attacker may also gain unauthorized access to a user's account DUclassmate may allow unauthorized remote attackers to gain access to a compu ...

NVD-CWE-Other http://www.securityfocus.com/bid/11363 http://www.osvdb.org/10663 http://www.securitytracker.com/alerts/2004/Oct/1011597.html https://exchange.xforce.ibmcloud.com/vulnerabilities/17682 https://nvd.nist.gov https://www.exploit-db.com/exploits/24672/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-2198

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect