CVE-2008-5308 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 7.3% (pctl 94)
Patch early
A public exploit exists.
Description
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 7.28% — more likely to be exploited than 94% of all CVEs |
| Weakness | CWE-264 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-12-02 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| lovecms | lovecms |
| lovecms | the simple forum |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password | 2008-11-22 |
References
- http://osvdb.org/50067
- http://secunia.com/advisories/32758
- http://securityreason.com/securityalert/4676
- http://www.securityfocus.com/bid/32435
- http://www.vupen.com/english/advisories/2008/3243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46793
- https://www.exploit-db.com/exploits/7191
- http://osvdb.org/50067
- http://secunia.com/advisories/32758
- http://securityreason.com/securityalert/4676
- http://www.securityfocus.com/bid/32435
- http://www.vupen.com/english/advisories/2008/3243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46793
- https://www.exploit-db.com/exploits/7191
→ the Explorer · watch your stack · NVD