CVE-2003-0162

Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-04-02

Last modified

2024-08-08

Affected products

• Ecartis (Ecartis)

References

• http://marc.info/?l=bugtraq&m=104636153214262&w=2
• http://marc.info/?l=bugtraq&m=104673407728323&w=2
• http://www.debian.org/security/2003/dsa-271
• http://www.securityfocus.com/bid/6971
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11431