PT-2009-6270 · Simplog · Simplog

Amol Naik · Published 2009-11-27 · Updated 2017-08-17 · CVE-2009-4091

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Simplog version 0.9.3.2

Description The issue concerns improper access restriction in comments.php, allowing remote attackers to modify or delete comments using specific actions, such as the edit or del action.

Recommendations For Simplog version 0.9.3.2, restrict access to the comments.php file to prevent unauthorized modifications or deletions of comments. Consider temporarily disabling the edit and del actions until a proper fix is applied.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-4091

Affected Products

Simplog

References · 6

• 🔥 http://exploit-db.com/exploits/10180 · Exploit
• 🔥 https://exploit-db.com/exploits/10180 · Exploit
• 🔥 http://securityfocus.com/bid/37063 · Exploit
• http://secunia.com/advisories/21390 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4091 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54355 · Note