CVE-2008-5308
LoveCMS The Simple Forum 3.1d - Unauthenticated Administrator Password Change via Direct Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-5308. PoCs published by cOndemned.
AI-analyzed exploit summary This exploit changes the admin password and enables HTML in LoveCMS 1.6.2 Final by sending a crafted POST request to the admin panel. It leverages an authentication bypass or insecure direct object reference to modify settings without proper authorization.
Description
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php.
Exploits (1)
This exploit changes the admin password and enables HTML in LoveCMS 1.6.2 Final by sending a crafted POST request to the admin panel. It leverages an authentication bypass or insecure direct object reference to modify settings without proper authorization.