CVE-2009-1550

2009-05-0615:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON

Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to obtain the administrator login name and password via a direct request.

References

exchange.xforce.ibmcloud.com/vulnerabilities/50183

www.exploit-db.com/exploits/8555