Lucene search
HistoryMay 20, 2009 - 7:30 p.m.
CVE-2009-1739
cve-2009-1739
pad site scripts 3.6
authentication bypass
remote attack
privilege escalation
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.043 Low
EPSS
Percentile
92.4%
PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including administrative privileges, by setting the authuser cookie parameter to a valid username.
Affected configurations
Node
phpeasycodepad_site_scriptsMatch3.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpeasycode:pad_site_scripts | phpeasycode pad site scripts | eq | 3.6 |
Related
prion
prion
Authentication flaw
2009-05-20 19:30:00
cvelist
cvelist
CVE-2009-1739
2009-05-20 19:00:00
nvd
nvd
CVE-2009-1739
2009-05-20 19:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.043 Low
EPSS
Percentile
92.4%
Related for CVE-2009-1739