CVE-2008-6957 | BDVDB-2026-37826 Detail

Description#

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/7185
http://secunia.com/advisories/32731
https://exchange.xforce.ibmcloud.com/vulnerabilities/46785
http://www.discuz.net/archiver/?tid-1112426.html
http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm
http://www.securityfocus.com/bid/32424

Exploit#

https://www.exploit-db.com/exploits/7185

History#

Version 12009-08-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.