Lucene search
HistoryMar 16, 2009 - 4:30 p.m.
CVE-2008-6473
cve-2008-6473
blogator-script
remote attack
password change
vulnerability
7.2 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.02 Low
EPSS
Percentile
88.9%
_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified “a” parameter with a “%” wildcard symbol in the b parameter.
Affected configurations
Node
blogator-scriptblogator-scriptMatch0.95
| CPE | Name | Operator | Version |
|---|---|---|---|
| blogator-script:blogator-script | blogator-script | eq | 0.95 |
Related
nvd
nvd
CVE-2008-6473
2009-03-16 16:30:00
prion
prion
Default credentials
2009-03-16 16:30:00
cvelist
cvelist
CVE-2008-6473
2009-03-16 16:00:00
7.2 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.02 Low
EPSS
Percentile
88.9%
Related for CVE-2008-6473