CVE-2008-6752

no score yetEPSS 6.3%

revou revou: no CVSS score yet. EPSS 6.3% chance of exploitation in the next 30 days.

adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original password before changing passwords, which allows remote attackers to change the administrator's password and gain privileges via a direct request with modified newpass1 and newpass2 parameters in a Change operation.

EPSS: 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2009-04-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

revou:revou

References

http://osvdb.org/51705
http://secunia.com/advisories/33247
http://www.securityfocus.com/bid/34851
https://www.exploit-db.com/exploits/7523
http://osvdb.org/51705

Check your stack JSON