Vulnerability Details CVE-2009-4222
phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.5%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2009-4222
-
cpe:2.3:a:smartisoft:phpbazar:*
-
cpe:2.3:a:smartisoft:phpbazar:2.0.2
-
cpe:2.3:a:smartisoft:phpbazar:2.1.0
-
cpe:2.3:a:smartisoft:phpbazar:2.1.1fix