EDB-27204

functional

Virtual Hosting Control System 2.2/2.4 - 'change_password.php' Current Password

view exploit source exploit_dbverifiedtype webappsauthor Roman Medina-Heigl Hernandezpublished 2006-02-13catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-0684UShigh7.5Exploit
change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan