CVE-2006-6820
myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain prof…
Published: 2006-12-29 · CVSS: Unscored
myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7