← Database

CVE-2008-3938

HIGH CVSS: 8.8 Published: 2008-09-05 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action.

Affected Platforms

Opendb Opendb

Weakness Type

CWE-352, CWE-352

References