CVE-2009-3180

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php.

Date published : 2009-09-11

http://www.exploit-db.com/exploits/9425

http://secunia.com/advisories/33686