Lucene search
HistoryDec 29, 2009 - 8:41 p.m.
CVE-2009-4447
cve-2009-4447
jax guestbook
authentication bypass
remote attack
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.047 Low
EPSS
Percentile
92.7%
Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct request to admin/guestbook.admin.php.
Affected configurations
Node
jax_scriptsjax_guestbookMatch3.5.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| jax_scripts:jax_guestbook | jax scripts jax guestbook | eq | 3.5.0 |
Related
prion
prion
Authentication flaw
2009-12-29 20:41:00
nvd
nvd
CVE-2009-4447
2009-12-29 20:41:20
cvelist
cvelist
CVE-2009-4447
2009-12-29 20:15:00
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.047 Low
EPSS
Percentile
92.7%
Related for CVE-2009-4447