CVEvulnerability
CVE-2003-0162
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-04-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.
Affected configurations
• ecartis ecartis 1.0.0 snapshot 2002-10-13
References
- http://marc.info/?l=bugtraq&m=104636153214262&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104673407728323&w=2 marc.info
- http://www.debian.org/security/2003/dsa-271 www.debian.org
- http://www.securityfocus.com/bid/6971 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11431 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=104636153214262&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104673407728323&w=2 marc.info
- http://www.debian.org/security/2003/dsa-271 www.debian.org
- http://www.securityfocus.com/bid/6971 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11431 exchange.xforce.ibmcloud.com