CVE-2008-5308 The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct reque...
HighCVSS 7.5
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lovecms the simple forum | = 3.1d | No fix listed |
References
- 50067 vdb-entry
- 32758 third-party-advisory vendor-advisory
- 4676 third-party-advisory
- 32435 exploit vdb-entry
- ADV-2008-3243 vdb-entry
- lovecms-password-security-bypass(46793) vdb-entry
- 7191 exploit