CVE-2008-6729

Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the (1) password or (2) email_address parameter.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
VendorProductVersion
phpmotionphpmotion
𝑥
≤ 2.1
phpmotionphpmotion
1.0
phpmotionphpmotion
2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/50999
http://secunia.com/advisories/33309
https://exchange.xforce.ibmcloud.com/vulnerabilities/47585
https://www.exploit-db.com/exploits/7557
http://osvdb.org/50999
http://secunia.com/advisories/33309
https://exchange.xforce.ibmcloud.com/vulnerabilities/47585
https://www.exploit-db.com/exploits/7557