PT-2009-6270 · Simplog · Simplog

Amol Naik · Publicado 2009-11-27 · Atualizado 2017-08-17 · CVE-2009-4091

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Simplog version 0.9.3.2

Description The issue concerns improper access restriction in comments.php, allowing remote attackers to modify or delete comments using specific actions, such as the edit or del action.

Recommendations For Simplog version 0.9.3.2, restrict access to the comments.php file to prevent unauthorized modifications or deletions of comments. Consider temporarily disabling the edit and del actions until a proper fix is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-4091

Produtos afetados

Simplog

Referências · 6

• 🔥 http://exploit-db.com/exploits/10180 · Exploit
• 🔥 https://exploit-db.com/exploits/10180 · Exploit
• 🔥 http://securityfocus.com/bid/37063 · Exploit
• http://secunia.com/advisories/21390 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54355 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4091 · Nota de Segurança