CVE-2006-2807: Aspwebsoft Speedy Asp Discussion Forum

High severity, CVSS 10.0. EPSS: 4.1% chance of exploitation in the next 30 days.

ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp.

Affected products

• Aspwebsoft Speedy Asp Discussion Forum: any version

Published 2006-06-05. Last modified 2026-06-16.