CVE-2006-6821

CVE-2006-6821 describes an improper input validation vulnerability in the myprofile.asp component of Enthrallweb eNews. Authenticated attackers can exploit this flaw by manipulating the MM_recordId parameter to modify profile fields of other user accounts. The vulnerability has a CVSS score of 3.5 (medium severity), indicating it can be exploited remotely with medium complexity by an authenticated user, leading to partial integrity impact. While not listed in CISA KEV, an ExploitDB entry (EDB-2996) confirms the existence of exploit code for remote user password changes, though there is no evidence of active exploitation or significant community discussion.