CVE-2008-6729 | BDVDB-2026-36222 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the (1) password or (2) email_address parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/33309
http://osvdb.org/50999
https://exchange.xforce.ibmcloud.com/vulnerabilities/47585
https://www.exploit-db.com/exploits/7557

Exploit#

https://www.exploit-db.com/exploits/7557

History#

Version 12009-04-20Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.