CVE-2005-2036

modifyUser.asp in Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-06-16

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Cool Cafe Chat (Cool Cafe Chat)

References

• http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt
• http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html
• http://www.osvdb.org/17350