Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2008-6729

Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the (1) password or (2) email_address parameter.

Published: Apr 20, 2009
Updated: Nov 9, 2025
CVE: CVE-2008-6729
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-352

Affected Software
References

Software	From	Fixed in
phpmotion / phpmotion	1.0	1.0.x
phpmotion / phpmotion	2.0	2.0.x
phpmotion / phpmotion	-	2.1.x

http://osvdb.org/50999
http://secunia.com/advisories/33309
https://exchange.xforce.ibmcloud.com/vulnerabilities/47585
https://www.exploit-db.com/exploits/7557

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo