Lucene search
PRIOn knowledge basePRION:CVE-2009-4174HistoryDec 02, 2009 - 7:30 p.m.
Design/Logic Flaw
2009-12-0219:30:00
PRIOn knowledge base
www.prio-n.com
3
The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows remote authenticated users with Journalist or Editor access to bypass administrative moderation and edit previously submitted articles via a modified id parameter in a doeditnews action.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cutenews | eq | 1.4.6 | |
| utf-8_cutenews | eq | 8 |
Related
nvd
nvd
CVE-2009-4174
2009-12-02 19:30:00
cve
cve
CVE-2009-4174
2009-12-02 19:30:00
cvelist
cvelist
CVE-2009-4174
2009-12-02 19:00:00
openvas
openvas
CuteNews/UTF-8 CuteNews Multiple Vulnerabilities
2009-12-08 00:00:00
CuteNews/UTF-8 CuteNews Multiple Vulneablities
2009-12-08 00:00:00