Vulnerability Details CVE-2009-1767
admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.019
EPSS Ranking 82.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/35090
- http://www.securityfocus.com/bid/34977
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50561
- https://www.exploit-db.com/exploits/8691
- http://secunia.com/advisories/35090
- http://www.securityfocus.com/bid/34977
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50561
- https://www.exploit-db.com/exploits/8691
Products affected by CVE-2009-1767
-
cpe:2.3:a:2daybiz:template_monster_clone:-