Back to search
CVE-2008-7188
Published: Sep 9, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the profile of arbitrary users via a modified uid variable to siteadmin/useredit.php. NOTE: this can be used to recover the password of the user by using the modified e-mail address in the email parameter to recoverpass.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
28313
third-party-advisory
x_refsource_SECUNIA
clipshare-useredit-security-bypass(39494)
vdb-entry
x_refsource_XF
27148
vdb-entry
x_refsource_BID
4837
exploit
x_refsource_EXPLOIT-DB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now