Lucene search
HistoryMar 05, 2010 - 6:30 p.m.
CVE-2009-4674
cve-2009-4674
admin.php
mole group sky hunter
airline ticket sale script
bus ticket script
remote attackers
password change
7.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.3%
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.
Affected configurations
Node
mole-groupbus_ticket_scriptMatch-
ORmole-groupsky_hunter_airline_ticket_sale_scriptMatch-
Related
nvd
nvd
CVE-2009-4674
2010-03-05 18:30:00
prion
prion
Code injection
2010-03-05 18:30:00
cvelist
cvelist
CVE-2009-4674
2010-03-05 18:00:00
7.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.3%
Related for CVE-2009-4674