CVE-2009-1670

2009-05-1818:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.047 Low

EPSS

Percentile

92.7%

JSON

user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors. NOTE: some of these details are obtained from third party information.

References

osvdb.org/54282

secunia.com/advisories/34966

www.securityfocus.com/bid/34866

exchange.xforce.ibmcloud.com/vulnerabilities/50371

www.exploit-db.com/exploits/8626