CVE-2008-5219 | BDVDB-2026-33556 Detail

Description#

The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified npass and npass1 parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/49885
http://secunia.com/advisories/32718
https://www.exploit-db.com/exploits/7149
http://securityreason.com/securityalert/4634

Exploit#

https://www.exploit-db.com/exploits/7149

History#

Version 12008-11-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.