profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2006-02-16T11:00:00
Updated: 2024-08-07T16:48:55.223Z
Reserved: 2006-02-16T00:00:00
Link: CVE-2006-0724

No data.

Status : Modified
Published: 2006-02-16T11:02:00.000
Modified: 2024-11-21T00:07:11.600
Link: CVE-2006-0724

No data.