CVE-2008-7066: 2enetworx Openforum

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters.

Affected products

• 2enetworx Openforum: version 0.66 only

Published 2009-08-25. Last modified 2026-06-16.