CVE-2008-5308: Lovecms The Simple Forum

High severity, CVSS 7.5. EPSS: 7.3% chance of exploitation in the next 30 days.

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php.

Affected products

• Lovecms The Simple Forum: version 3.1d only

Published 2008-12-02. Last modified 2026-06-16.