Vulnerability Details CVE-2003-0494
password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.3%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-2003-0494
-
cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03