CVE-2008-7309: Insoshi

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the ForumPost user_id value via a modified URL, related to a "mass assignment" vulnerability.

Affected products

• Insoshi Insoshi: up to and including 20080919

Published 2012-04-05. Last modified 2026-06-16.