Lucene search
HistoryAug 12, 2009 - 10:30 a.m.
CVE-2008-6957
cve-2008-6957
crossday discuz! board
remote attackers
password reset
nvd
7.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.095 Low
EPSS
Percentile
94.8%
member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.
Affected configurations
Node
discuzdiscuz\!Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| discuz:discuz\! | discuz discuz! | eq | - |
Related
prion
prion
Design/Logic Flaw
2009-08-12 10:30:00
nvd
nvd
CVE-2008-6957
2009-08-12 10:30:00
cvelist
cvelist
CVE-2008-6957
2009-08-12 10:00:00
7.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.095 Low
EPSS
Percentile
94.8%
Related for CVE-2008-6957