Back to Database
Status published
Low
CVE-2006-6821
myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId...
Vulnerability Description
myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6821
Credits & Attribution
No credits recorded in the NVD database.
References
More from enthrallweb
View All →CVE-2009-0252
Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow...
High
7.5
CVE-2006-6822
myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId...
Low
3.5
CVE-2006-6820
myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId...
Low
3.5
CVE-2006-6806
SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows...
High
7.5
CVE-2006-6805
SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote...
High
7.5
Affected Vendor
enthrallweb
View all reports →Affected Software
enews
Vulnerable Versions:
Unknown
Timeline
Official Publish:
December 29th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.