Lucene search
HistoryMay 16, 2009 - 6:30 p.m.
CVE-2009-1652
cve-2009-1652
adminaddeditdetails.php
business community script
remote attackers
privileges
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.7%
admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| 2daybiz:business_community_script | 2daybiz business community script | eq | * |
Related
cvelist
cvelist
CVE-2009-1652
2009-05-16 18:00:00
prion
prion
Server side request forgery (ssrf)
2009-05-16 18:30:00
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.7%
Related for CVE-2009-1652