high7.5Public exploit code
CVE-2008-5308
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password2008-11-22 · webapps · php · Verified
Impact
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lovecms | The Simple Forum | Version 3.1d |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/50067
- http://secunia.com/advisories/32758
- http://securityreason.com/securityalert/4676
- http://www.securityfocus.com/bid/32435
- http://www.vupen.com/english/advisories/2008/3243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46793
- https://www.exploit-db.com/exploits/7191
- http://osvdb.org/50067
- http://secunia.com/advisories/32758
- http://securityreason.com/securityalert/4676
- http://www.securityfocus.com/bid/32435
- http://www.vupen.com/english/advisories/2008/3243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46793
- https://www.exploit-db.com/exploits/7191