CVE-2008-5221

HIGH 7.5CVE-2008-5221 · Published 25/11/2008 · updated 16/06/2026

In short

CVE-2008-5221 is a HIGH (CVSS 7.5) vulnerability affecting wportfolio (wportfolio).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 85.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wportfolio wportfolio	`= 0.2≤ 0.3`	No fix yet

Description

The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and password_retype parameters.

References

securityreason.com/securityalert/4631
securityfocus.com/bid/32384 · Exploit
vupen.com/english/advisories/2008/3219
exchange.xforce.ibmcloud.com/vulnerabilities/46772
exploit-db.com/exploits/7170

More vulnerabilities in wportfolio

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free