CVE-2008-5308

N/A Unknown

Published: December 02, 2008 Modified: April 23, 2026

Description

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://osvdb.org/50067

Source: cve@mitre.org

http://secunia.com/advisories/32758

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4676

Source: cve@mitre.org

http://www.securityfocus.com/bid/32435

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2008/3243

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46793

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7191

Source: cve@mitre.org

http://osvdb.org/50067