Slashcode is a bulletin board, discussion and portal framework. It is widely used, and is behind the popular Slashdot page. A vulnerability exists in specific versions of SlashCode. Any valid, logged in user is able to gain access to arbitrary user accounts. As the user may gain access to administrative accounts, full control of the site is possible through exploitation of this vulnerability.
Slashcode is a bulletin board, discussion and portal framework. It is widely used, and is behind the popular Slashdot page. A vulnerability exists in specific versions of SlashCode. Any valid, logged in user is able to gain access to arbitrary user accounts. As the user may gain access to administrative accounts, full control of the site is possible through exploitation of this vulnerability.