Vulnerability Details CVE-2006-6822
myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.043
EPSS Ranking 88.6%
CVSS Severity
CVSS v2 Score 3.5
References
Products affected by CVE-2006-6822
-
cpe:2.3:a:enthrallweb:eclassifieds:*