CVE:CVE-2006-2807
CNNVD:CNNVD-200606-092
ASPwebSoft Speedy Asp Discussion Forum允许远程攻击者通过修改账户id和可能修改任意传给profileupdate.asp的name、email、country、password和passwordre参数值来修改任意账户的密码。
solution:Upgrade aspwebsoft speedy_asp_discussion_forum to a higher version than *