CVE Database
/

CVE-2008-5568

Back to search

CVE-2008-5568

Published: Dec 15, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the admin_id, newpass_1, and newpass_2 parameters.

VendorProductVersions

n/a

n/a

affected
n/a

References

4735
third-party-advisory
x_refsource_SREASON
33039
third-party-advisory
x_refsource_SECUNIA
7364
exploit
x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now