Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-4222
cve-2009-4222
phpbazar
security
authentication
remote access
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.0%
phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request.
Affected configurations
Node
smartisoftphpbazarRange≤2.1.1
ORsmartisoftphpbazarMatch2.0.2
ORsmartisoftphpbazarMatch2.1.0
ORsmartisoftphpbazarMatch2.1.1fix
Related
nvd
nvd
CVE-2009-4222
2009-12-07 17:30:00
prion
prion
Design/Logic Flaw
2009-12-07 17:30:00
cvelist
cvelist
CVE-2009-4222
2022-10-03 16:24:04
openvas
openvas
phpBazar <= 2.1.1 SQLi Vulnerability - Active Check
2010-02-17 00:00:00
phpBazar 'classified.php' SQL Injection Vulnerability
2010-02-17 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.0%
Related for CVE-2009-4222