Back to search
CVE-2008-5308
Published: Dec 2, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
4676
third-party-advisory
x_refsource_SREASON
32758
third-party-advisory
x_refsource_SECUNIA
ADV-2008-3243
vdb-entry
x_refsource_VUPEN
50067
vdb-entry
x_refsource_OSVDB
32435
vdb-entry
x_refsource_BID
lovecms-password-security-bypass(46793)
vdb-entry
x_refsource_XF
7191
exploit
x_refsource_EXPLOIT-DB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now