save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and previous versions allows remote malicious users to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
webevents online event registration |