CVEvulnerability
CVE-2008-6729
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the (1) password or (2) email_address parameter.
Affected configurations
• phpmotion phpmotion (<= 2.1)
• phpmotion phpmotion 1.0
• phpmotion phpmotion 2.0
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://osvdb.org/50999 osvdb.org
- http://secunia.com/advisories/33309 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47585 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7557 www.exploit-db.com
- http://osvdb.org/50999 osvdb.org
- http://secunia.com/advisories/33309 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47585 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7557 www.exploit-db.com