CVEvulnerability
CVE-2008-6957
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.
Affected configurations
• discuz discuz\!
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/32731 Vendor Advisory
- http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm Exploit
- http://www.discuz.net/archiver/?tid-1112426.html Vendor Advisory
- http://www.securityfocus.com/bid/32424 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46785 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7185 www.exploit-db.com
- http://secunia.com/advisories/32731 Vendor Advisory
- http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm Exploit
- http://www.discuz.net/archiver/?tid-1112426.html Vendor Advisory
- http://www.securityfocus.com/bid/32424 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46785 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7185 www.exploit-db.com