← Database

CVE-2008-7066

HIGH CVSS: 7.5 Published: 2009-08-25 Modified: 2026-06-16

Description

OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters.

Affected Platforms

2Enetworx Openforum

Weakness Type

CWE-264

References