CVE-2007-6661

2z project 0.9.6.1 allows attackers to change the password without supplying the old password.

• http://2z-project.ru/forum/viewtopic.php?pid=8309
• http://securityreason.com/securityalert/3514
• http://www.securityfocus.com/archive/1/485590/100/0/threaded
• http://www.securityfocus.com/bid/27057
  Exploit
• http://2z-project.ru/forum/viewtopic.php?pid=8309
• http://securityreason.com/securityalert/3514
• http://www.securityfocus.com/archive/1/485590/100/0/threaded
• http://www.securityfocus.com/bid/27057
  Exploit