CVE-2008-6752

adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original password before changing passwords, which…

published April 24, 2009

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original password before changing passwords, which allows remote attackers to change the administrator's password and gain privileges via a direct request with modified newpass1 and newpass2 parameters in a Change operation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06348 · 93.6th percentile
Published
2009-04-24T14:00Z
EPSS history
Timeline
  • 24 APR 14:00Z
    adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original password before changing passwords, which…
    cvelistv5