| Package | Affected versions | Patched versions |
|---|---|---|
| duclassmate | = 1.0= 1.1 |
account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free