CVE-2008-6957: Discuz Discuz!

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.

Affected products

• Discuz Discuz!: affected versions not specified

Published 2009-08-12. Last modified 2026-06-16.