CVE-2006-6007: Webevents Online Event Registration

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter.

Affected products

• Webevents Online Event Registration: up to and including 2.0

Published 2006-11-21. Last modified 2026-06-16.