CVE-2008-3938

2008-09-0515:00:00

mitre

www.cve.org

cross-site request forgery

open media collectors database

update password action

AI Score

Confidence

High

EPSS

0.001

Percentile

48.3%

JSON

Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action.

References

packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt

secunia.com/advisories/31719