VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 25, 2008· Updated Jun 16, 2026

CVE-2008-5219

CVE-2008-5219

Description

The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified npass and npass1 parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Videoscript/Videoscript2 versions
    cpe:2.3:a:videoscript:videoscript:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:videoscript:videoscript:*:*:*:*:*:*:*:*range: <=4.0.1.50
    • (no CPE)range: <=4.0.1.50

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.