CVE-2008-7309

Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the…

published April 4, 2012

CVSS
—
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the ForumPost user_id value via a modified URL, related to a "mass assignment" vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01053 · 64.1th percentile
Published
2012-04-04T22:00Z
EPSS history
Timeline
  • 04 APR 22:00Z
    Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the…
    cvelistv5