Enews

enews

Vendor: Enthrallweb • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2006-6821

1Enthrallweb

1Enews

Apr 23, 2026

Dec 29, 2006

N/A· v4

N/A· v3

3.5 LOW· v2

myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying th...Show more