Vulnerabilities > Lovecms > THE Simple Forum

DATE CVE VULNERABILITY TITLE RISK
2008-12-02 CVE-2008-5308 Permissions, Privileges, and Access Controls vulnerability in Lovecms the Simple Forum 3.1D
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php.
network
low complexity
lovecms CWE-264
7.5