← Database

CVE-2008-6957

HIGH CVSS: 7.5 Published: 2009-08-12 Modified: 2026-06-16

Description

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.

Affected Platforms

Discuz Discuz\!

Weakness Type

CWE-264

References