CVE-2008-6752

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-04-24 · updated 2026-06-16
Weakness: CWE-20

Description

adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original password before changing passwords, which allows remote attackers to change the administrator's password and gain privileges via a direct request with modified newpass1 and newpass2 parameters in a Change operation.

Affected products

Revou: all versions

References

http://osvdb.org/51705
http://secunia.com/advisories/33247
http://www.securityfocus.com/bid/34851
https://www.exploit-db.com/exploits/7523
http://osvdb.org/51705
http://secunia.com/advisories/33247
http://www.securityfocus.com/bid/34851
https://www.exploit-db.com/exploits/7523

Get alerted when CVE-2008-6752 or the next vulnerability affects your stack