CVE-2008-6957

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.84%

Published

Aug 12, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBDiscuz! - Remote Reset User Password

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.

Weaknesses (CWE)

CWE-264

Affected Products (1)

discuz · discuz\!vulnerable

References (12)

http://secunia.com/advisories/32731

Vendor Advisory

http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm

Exploit

http://www.discuz.net/archiver/?tid-1112426.html

Vendor Advisory

http://www.securityfocus.com/bid/32424

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/46785

https://www.exploit-db.com/exploits/7185

http://secunia.com/advisories/32731

Vendor Advisory

http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm

Exploit

http://www.discuz.net/archiver/?tid-1112426.html

Vendor Advisory

http://www.securityfocus.com/bid/32424

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/46785

https://www.exploit-db.com/exploits/7185

KEV Catalog EPSS Scores Vendors All CVEs