CVE-2008-3938

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-09-05 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action.

Affected products

Opendb: 1.0.6

References

http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt
http://secunia.com/advisories/31719
http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt
http://secunia.com/advisories/31719

Get alerted when CVE-2008-3938 or the next vulnerability affects your stack