CVE-2009-3168

CVE-2009-3168 affects Mevin Productions Basic PHP Events Lister 2.0. The vulnerability arises from improper access restriction to admin/reset.php and admin/user_add.php, allowing remote authenticated users to reset administrative passwords or add administrators via a direct request. Multiple conn...