Lucene search

K
cveMitreCVE-2008-3938
HistorySep 05, 2008 - 3:08 p.m.

CVE-2008-3938

2008-09-0515:08:00
CWE-352
mitre
web.nvd.nist.gov
23
cve-2008-3938
cross-site request forgery
csrf
open media collectors database
opendb
security vulnerability

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

7

Confidence

High

EPSS

0.001

Percentile

48.3%

Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action.

Affected configurations

Nvd
Node
opendbopendbMatch1.0.6
VendorProductVersionCPE
opendbopendb1.0.6cpe:2.3:a:opendb:opendb:1.0.6:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

7

Confidence

High

EPSS

0.001

Percentile

48.3%

Related for CVE-2008-3938