OpenForum 'profile.php' Authentication Bypass Vulnerability

This host is installed with OpenForum and is prone to Authentication Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodopenforumauthbypassvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenForum 'profile.php' Authentication Bypass Vulnerability Authors: Nikita MR Copyright: Copyright c 20...

CVE-2008-7066

OpenForum 0.66 Beta is impacted by CVE-2008-7066. The vulnerability allows remote attackers to bypass authentication and reset passwords of other users by sending a direct request with update=1 and modified user/password parameters. The NVD entry reports a base score of 7.5 (HIGH) with network ac...