CVE-2006-1026 - JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID

HIGH

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID

Published Mar 7, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.55%

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://secunia.com/advisories/19031		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://sourceforge.net/project/shownotes.php?group_id=154666&release_id=396824		x_refsource_CONFIRMPatch
http://sourceforge.net/tracker/index.php?func=detail&aid=1439037&group_id=154666&atid=792697		x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2006/0767		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/24958		vdb-entryx_refsource_XF

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 7, 2006

Updated Aug 7, 2024

Reserved Mar 6, 2006

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a