CVE-2008-6957

Discuz! - Remote Reset User Password

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2008-6957 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.

Description

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBDiscuz! - Remote Reset User PasswordExploitDB exploitby 80vulNot analyzed1 file
ExploitDB
PoC details

References

7