CVE-2008-5221

The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original…

published November 25, 2008

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and password_retype parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02547 · 84.8th percentile
Published
2008-11-25T18:09Z
EPSS history
Timeline
  • 25 NOV 18:09Z
    The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original…
    cvelistv5