CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 is vulnerable to an access control flaw where it fails to properly restrict access to the admin/reset.php and admin/user_add.php files. This security deficiency allows remote authenticated users to perform unauthorized actions, such as resetting admin...

CVE-2009-3168

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...