CVE-2008-6473
EUVD-2008-644316.03.2009, 16:30
_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| blogator-script | blogator-script | 0.95 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration