CVE-2008-3938

Summary

Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt
• http://secunia.com/advisories/31719

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt
• http://secunia.com/advisories/31719

• ←Previous
• Next→