CVE-2008-3938: CSRF

Published Sep 5, 2008

Updated

Cross-site request forgery (CSRF) vulnerability in useradmin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an updatepassword action.

Affected Software

1 affected component

OpenDb OpenDb=1.0.6

Event History

Sep 5, 2008

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3938?

CVE-2008-3938 is classified as a medium severity vulnerability due to its potential for unauthorized password changes.

How do I fix CVE-2008-3938?

To fix CVE-2008-3938, upgrade Open Media Collectors Database to a version that has addressed this CSRF vulnerability.

What types of attacks can exploit CVE-2008-3938?

CVE-2008-3938 can be exploited through cross-site request forgery attacks allowing attackers to change user passwords.

Who is affected by CVE-2008-3938?

Users of Open Media Collectors Database version 1.0.6 are affected by CVE-2008-3938.

How can I detect CVE-2008-3938 on my system?

You can detect CVE-2008-3938 by reviewing the logs for unusual password change requests or by checking the version of Open Media Collectors Database installed.