CVE-2008-5219
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 6.9%
exploitation probability
6.9%top 7% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified npass and npass1 parameters.
Affected products
n/a · n/apublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/7149unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.