Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote authenticated users to change the password of any targeted user accounts via lack of proper authorization in the user-controlled "userID" parameter of the HTTP POST request.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
globalnorthstar northstar club management 6.3 |