High severity8.8NVD Advisory· Published Sep 5, 2008· Updated Jun 16, 2026
CVE-2008-3938
CVE-2008-3938
Description
Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action.
Affected products
2- Range: =1.0.6
Patches
Vulnerability mechanics
References
2- packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txtnvdExploit
- secunia.com/advisories/31719nvdVendor Advisory
News mentions
0No linked articles in our index yet.