Vulnerabilities (CVE)

Filtered by vendor Changepassword Subscribe
Filtered by product Changepassword
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-1263 1 Changepassword 1 Changepassword 2024-11-20 7.2 HIGH N/A
changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environment variable to point to a malicious "make" program.