CVE-2008-5308

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the…

published December 2, 2008

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07279 · 94.3th percentile
Published
2008-12-02T11:00Z
EPSS history
Timeline
  • 02 DEC 11:00Z
    The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the…
    cvelistv5