CVE-2008-0141 actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action.
HighCVSS 7.5
EPSS 4.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webportal cms project webportal cms | = 0.6.0-beta | No fix listed |
References
- 27145 broken-link exploit third-party-advisory vdb-entry
- webportal-action-weak-security(39486) vdb-entry
- 4835 exploit third-party-advisory vdb-entry