Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro...

6.8 CVSS

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the admin_id, newpass_1, and newpass_2 parameters.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5568

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

ipn-mate

View all reports →

Affected Software

ipn pro 3

Vulnerable Versions:

Timeline

Official Publish: December 15th, 2008

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.