CVE-2008-0165
UnknownEPSS 0.64%
Last modified
CVE-2008-0165 is a vulnerability of currently unknown severity. Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.. EPSS estimates a 0.64% chance of exploitation in the next 30 days.
Description
Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ikiwiki | Ikiwiki | <= 2.41 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-0165?
Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.
How severe is CVE-2008-0165?
Severity scoring for CVE-2008-0165 is pending analysis. The EPSS model estimates a 0.64% probability of exploitation in the next 30 days.
How do I fix CVE-2008-0165?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-0157SQL injection vulnerability in FlexBB 0.6.3 and earlier allo…
- CVE-2008-0158Directory traversal vulnerability in index.php in Shop-Scrip…
- CVE-2008-0159SQL injection vulnerability in index.php in eggBlog 3.1.0 an…
- CVE-2008-0162misc.c in splitvt 1.6.6 and earlier does not drop group priv…
- CVE-2008-0163Linux kernel 2.6, when using vservers, allows local users to…
- CVE-2008-0164Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2008-0166OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-ba…7.5
- CVE-2008-0167The write_array_file function in utils/include.pl in GForge …
- CVE-2008-0169Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiw…
- CVE-2008-0171regex/v4/perl_matcher_non_recursive.hpp in the Boost regex l…
- CVE-2008-0172The get_repeat_type function in basic_regex_creator.hpp in t…
- CVE-2008-0173SQL injection vulnerability in Gforge 4.6.99 and earlier all…
Are you affected by CVE-2008-0165?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST