CVE-2008-3938

Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2008-09-05

Last modified

2025-04-03

Weaknesses

CWE-352

Affected products

• Opendb (Opendb)

References

• http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt
• http://secunia.com/advisories/31719