CVE-2009-4089

🗓️ 27 Nov 2009 20:45:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

telepark.wiki 2.4.23 allows remote attackers to bypass authorization and delete arbitrary pages/comments

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2009-4089	24 Aug 200900:00	–	circl
Cvelist	CVE-2009-4089	27 Nov 200920:45	–	cvelist
EUVD	EUVD-2009-4060	27 Nov 200920:45	–	euvd
NVD	CVE-2009-4089	29 Nov 200913:07	–	nvd
OpenVAS	Telepark.wiki Multiple Vulnerabilities	14 Dec 200900:00	–	openvas
OpenVAS	Telepark.wiki Multiple Vulnerabilities	14 Dec 200900:00	–	openvas
Prion	Authorization	29 Nov 200913:07	–	prion

NVD

Node

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/54329
blog	www.blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/
secunia	www.secunia.com/advisories/37391
packetstormsecurity	www.packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
exploit-db	www.exploit-db.com/exploits/9483
osvdb	www.osvdb.org/60214
osvdb	www.osvdb.org/60215

Parameter	Position	Path	Description	CWE
pageID	query param	ajax/deletePage.php	Authorization bypass via modified pageID to deletePage.php	CWE-287
pageID	query param	ajax/deleteComment.php	Authorization bypass via modified pageID to deleteComment.php	CWE-287

23 Apr 2026 00:35Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25

EPSS0.10773