medium6.4Public exploit code
CVE-2008-6473
_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Blogator-script 0.95 - Change User Password2008-04-05 · webapps · php · Verified
Impact
_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blogator-Script | Blogator-Script | Version 0.95 |