CVE-2007-0681
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other u…
Published: 2007-02-03 · CVSS: Unscored
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7