Security Advisory

CVE-2008-7309

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-04-04 22:00:00

Last updated 2024-09-16 19:05:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the ForumPost user_id value via a modified URL, related to a "mass assignment" vulnerability.

← Browse all CVEs View on cve.org ↗