CVEvulnerability
CVE-2008-6752
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-04-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original password before changing passwords, which allows remote attackers to change the administrator's password and gain privileges via a direct request with modified newpass1 and newpass2 parameters in a Change operation.
Affected configurations
• revou revou
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/51705 osvdb.org
- http://secunia.com/advisories/33247 Vendor Advisory
- http://www.securityfocus.com/bid/34851 www.securityfocus.com
- https://www.exploit-db.com/exploits/7523 www.exploit-db.com
- http://osvdb.org/51705 osvdb.org
- http://secunia.com/advisories/33247 Vendor Advisory
- http://www.securityfocus.com/bid/34851 www.securityfocus.com
- https://www.exploit-db.com/exploits/7523 www.exploit-db.com