CVE-2008-6957

Published: Aug 12, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.

Affected (1)

Products: Discuz: Discuz!

Discuz

1 product

Discuz!

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Discuz Discuz!	All versions

Related CWEs

CWE-264

References (12)

http://secunia.com/advisories/32731

Source: cve@mitre.org

Vendor Advisory

http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm

Source: cve@mitre.org

Exploit

http://www.discuz.net/archiver/?tid-1112426.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/32424

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/46785

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7185

Source: cve@mitre.org

http://secunia.com/advisories/32731